About this role
As a Splunk Security Engineer, you will play a critical role in supporting NATO SOFCOM cyber missions by administering Splunk Enterprise Security, developing security analytics, and onboarding critical log sources. You will contribute to threat detection, incident investigations, and compliance reporting, directly impacting national security.
What we are looking for 6
- Administer and optimize Splunk Enterprise Security and its components
- Develop and tune SPL queries, dashboards, and alerts for threat detection
- Onboard and normalize authorized log sources, ensuring data quality
- Support threat hunting, incident investigations, and evidence collection
- Document configurations, operating procedures, and SIEM health metrics
- Active Secret clearance required
Work authorization
- Must be a U.S. citizen.
- Requires a Secret security clearance.