Responsible for 24×7 security monitoring, initial alert triage, identification of suspicious activities, and timely escalation of potential security incidents to L2 analysts.
Responsibilities
Monitor security alerts and events across enterprise infrastructure using SIEM platforms.
Perform initial triage and validation of alerts to identify potential security threats.
Analyze security events from firewalls, IDS/IPS, EDR, antivirus, WAF, VPN, Active Directory, cloud, and network devices.
Perform initial triage and classification of incidents.
Escalate confirmed incidents to SOC L2 Analysts and/or Incident Response Team.
Senior Splunk ITSI Engineer responsible for implementation, configuration, administration, and optimization of Splunk IT Service Intelligence in classified environments.
Compensation
The pay range for this position is a general guideline only and not a guarantee of compensation or salary. Our approach to crafting offers considers various factors to provide an equitable and competitive comprehensive compensation package. These considerations include, but are not limited to, contracted rates, education, certification(s), experience, specific competencies required for this position, and geographic location.
Responsibilities
Implement and configure Splunk ITSI services
Develop and optimize SPL queries, dashboards, alerts, and correlation searches
Configure ITSI event management capabilities
Integrate infrastructure, application, and operational data sources
Troubleshoot complex monitoring environments
Requirements
Bachelor's degree in Computer Science, Information Technology, Systems Engineering, Cybersecurity, or a related technical field
Nice to have: Experience supporting Splunk ITSI in classified, Intelligence Community, or Department of Defense environments
Nice to have: Familiarity with Splunk Enterprise Security (ES)
Lead the design, implementation, modernization, and optimization of enterprise Splunk platforms supporting mission‑critical cybersecurity, operational, and analytics requirements for a federal customer.
Responsibilities
Serve as the technical architect and subject matter expert for the customer's enterprise Splunk environment.
Design, implement, and maintain scalable Splunk architectures supporting enterprise security monitoring, operational analytics, and mission requirements.
Develop and maintain Splunk infrastructure, including indexers, search heads, deployment servers, forwarders, and associated platform components.
Develop architecture standards, technical designs, configuration standards, and implementation plans for Splunk capabilities.
Design and implement data ingestion strategies from network, security, infrastructure, application, cloud, endpoint, and other enterprise sources.
Requirements
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related technical discipline
Nice to have: Splunk Enterprise Architect
Nice to have: Splunk Core Certified Consultant
Nice to have: Splunk Enterprise Certified Admin
Nice to have: Splunk Enterprise Security Certified Admin
Lead technical customer success for Splunk solutions, driving adoption, onboarding, and optimization of Splunk Enterprise Security, UBA, and SOAR products.
Responsibilities
Guide account teams and customers on optimal use of Splunk Platform
Deliver strategic, case-based technical consulting up to 90 days
Onboard and enable customers through workshops and milestones
Conduct health reviews and remediation
Activate security use cases
Requirements
Nice to have: Security automation
Nice to have: Behavioral analytics (UEBA)
Nice to have: NIST framework
Nice to have: CIS framework
Nice to have: Cloud infrastructure (AWS, Azure, GCP)
Support a Defense Counterintelligence and Security Agency Portfolio Acquisition Executive managed service provider contract as an Information System Security Officer, overseeing risk management, continuous monitoring, vulnerability management, and compliance for classified systems.
Locations (2)
Herndon, Virginia, United States
Hanover, Maryland, United States
Compensation
Salary Range: $103,500.00 - $181,100.00
Responsibilities
Drive RMF activities for assigned information systems
Design and implement system continuous monitoring plans
Perform vulnerability management and drive remediation
Serve as key point of contact for system reporting and communications
Collaborate with stakeholders to identify challenges and implement solutions
Requirements
Bachelor’s degree in cybersecurity, information assurance, information systems engineering, computer science, or a related field
Principal Infrastructure Engineer - Splunk Admin (SIEM)
FC Global Services India LLP (First Citizens India) · Posted Jul 27, 2026
Lead enterprise-wide observability and monitoring initiatives as a Splunk administrator, designing and implementing data onboarding pipelines, configurations, and automation across the organization.
Responsibilities
Design and implement standardized data onboarding procedures and configurations for applications
Conduct technical onboarding of applications into Splunk Cloud
Map application data and security events to Splunk Common Information Model (CIM)
Build and optimize data models, lookups, and knowledge objects
Design and implement automated onboarding pipelines using Git, Ansible, and CI/CD
Requirements
BE or MCA Degree in computer science or related field
Lead and assist incident response efforts, create content in SIEM tools, support SOC engineering, evaluate malware, resolve client issues, and maintain security policies.
Responsibilities
Understand and apply principles, concepts, technologies and standards of professional field
Apply research information gathering and analytical and interpretation skills to problems of diverse scope
Write/create formal documentation such as reports, slide decks, and architecture diagrams
Lead and/or assist incident response efforts
Create content (queries, dashboards, reports, etc.) in industry leading SIEM tools, such as Splunk
Requirements
Bachelor’s degree in related field, to include computer science, or equivalent combination of education and experience
Sr. Splunk ITSI Engineer-Active (TS/SCI/FSP)Vibrint · Hanover, US
Splunk ArchitectDefinitive Innovative Solutions · Oakton, US
Splunk Technical Leader, Customer SuccessCisco · Seoul, South Korea
Splunk Technical Leader, Customer SuccessCisco · Seoul, South Korea
Information System Security OfficerParsons · Herndon, US+1 more
Security Center Operations Sr. AnalystNTT DATA Services · Noida, India