Senior Splunk Engineer

Position Description

Valiant Solutions is seeking a skilled and motivated Intermediate Senior Splunk Engineer to join our dynamic cybersecurity engineering team supporting our client’s consolidated Security Operations Center. In this role, you’ll apply your Splunk expertise to perform data source onboarding through a variety of ingestion methods, configure data schemas, and develop advanced Splunk dashboards, alerts, and automation workflows. Your work will directly enhance the efficiency and effectiveness of cybersecurity monitoring, detection, and response capabilities.

 

As part of your responsibilities, you’ll collaborate closely with architects, senior engineers, and operational stakeholders to ensure seamless data integration, normalization, and optimization within our Splunk SIEM platform. You will also be responsible for developing and maintaining comprehensive technical documentation to support operational excellence and compliance requirements. If you’re passionate about Splunk engineering, thrive on solving integration challenges, and enjoy creating impactful analytics solutions, this position provides an exciting opportunity to grow your career and directly contribute to securing critical federal infrastructure.

 

Named one of the Best Places to Work in the Washington DC area for 11 consecutive years, Valiant is proud of our employee-centric culture and commitment to excellence. If you are interested in learning more about Valiant and this opportunity, we invite you to apply now!

 

This position should expect to report onsite, but may allow for remote work. Remote work necessitates a high-level trust in our employees and we strictly adhere to the details found below in our Remote Work Policy. 

 

Required Experience:

• Active Secret or Top Secret Clearance.
• 10+ Years IT experience
• Bachelor of Science in Computer Science, Information Systems, Mathematics, Engineering, related degree or an additional two (2) years of experience. 
• Minimum of eight (8) years of hands-on experience working directly with Splunk, including architecture, design, integration, operations, and continuous platform advancement.
• Proven experience architecting and designing enterprise-scale Splunk SIEM solutions, including creation of detailed design documentation and architectural diagrams.
• Expert-level experience onboarding complex data sources into Splunk via multiple ingestion methods (Universal Forwarders, Heavy Forwarders, HEC, syslog, REST APIs, etc.).
• Demonstrated senior-level experience developing and optimizing advanced Splunk schemas, data extraction rules, normalization methods, and data models.
• Extensive experience creating, maintaining, and enhancing sophisticated Splunk dashboards, alerts, reports, and automated workflows tailored to high-level cybersecurity and operational needs.
• Deep understanding and experience with Splunk Enterprise Security (ES), including configuration, tuning, and content management.
• Proven ability to mentor junior and intermediate engineers, collaborate with senior stakeholders, and provide expert-level troubleshooting and technical guidance.

 

Responsibilities:

• Lead the architecture, design, and implementation of advanced Splunk SIEM solutions, ensuring alignment with organizational cybersecurity objectives.
• Develop detailed Splunk architecture documentation, including integration diagrams, configuration baselines, and operational procedures.
• Drive complex Splunk data source onboarding projects, ensuring optimal data integration, normalization, and performance.
• Provide strategic oversight and development of sophisticated Splunk dashboards, alerts, correlation searches, and reporting capabilities.
• Continuously advance and optimize the Splunk platform through innovative integrations, automation, and performance enhancements.
• Collaborate closely with architects, senior stakeholders, and engineering teams to define technical strategies, solve integration challenges, and ensure cohesive platform development.
• Mentor and guide intermediate and junior Splunk engineers, fostering professional development and technical excellence.
• Proactively identify areas for improvement and implement enhancements to Splunk architecture, data processing efficiency, and cybersecurity analytics.

 

Desired Certifications:

• Splunk Enterprise Certified Architect
• Splunk Enterprise Security Certified Admin
• Splunk Certified Developer
• CISSP (Certified Information Systems Security Professional)
• CompTIA Advanced Security Practitioner (CASP+)

 

About