Senior Splunk Engineer
Chenega Corporation2 years ago
Oakton, VA, USASenior
Base Salary
$145k - $215k/yr
Responsibilities
- Lead the design and optimization of Splunk dashboards, alerts, correlation searches, and data ingestion.
- Integrate network flow data, traffic patterns, and anomalies into actionable Splunk detections with network and ExtraHop teams.
- Develop network baseline visualizations and identify deviations using correlated log and traffic data.
- Tune log sources and ingestion pipelines to improve performance, reduce false positives, and increase detection fidelity.
- Develop and manage Splunk content for firewalls, VPNs, proxies, routers, switches, and endpoint devices.
- Interpret detection triggers using network flows, packet captures, and behavioral anomalies.
- Configure and maintain Splunk apps, indexes, forwarders, and CIM data models.
- Produce documentation, runbooks, and training for SOC teams and technical stakeholders.
- Support Splunk deployments in connected, disconnected, and secure enclave environments.
- Mentor junior engineers and analysts in SPL, dashboarding, and detection development.
Requirements
- Bachelor’s degree in a related field, or an associate’s degree plus 2+ additional years of relevant IT experience, or a high school diploma/GED plus 4+ additional years of directly related IT experience.
- 12+ years of cybersecurity or network engineering experience, including 3+ years of Splunk engineering and content development.
- Hands-on experience with Splunk Enterprise and Enterprise Security in air-gapped or mission-secure environments.
- Current DoD 8140 or 8570 baseline certification at IAT Level II or higher, such as CompTIA Security+.
- U.S. citizenship and an active TS/SCI clearance.
- Expert-level Splunk SPL development and content creation skills.
- Strong understanding of TCP/IP, packet structures, and network traffic analysis.
- Familiarity with ExtraHop, SolarWinds, and PCAP-based threat identification.
- Experience correlating multi-source logs with behavioral and network data and aligning data with Splunk CIM and Enterprise Security frameworks.
- Proficiency with regular expressions, lookup tables, macros, and dashboard visualizations.
- Strong documentation, mentoring, collaboration, and cross-functional communication skills.
Benefits
- Professional development opportunities, on-the-job learning, and formal development programs.
- Well-being programs and a supportive culture focused on healthy, centered, and confident employees.
- Opportunities for hands-on experience and continued career growth.
Tech Stack
Splunk
Categories
About Chenega Corporation
Chenega Corporation is an Alaska Native village corporation that provides government services contracting, including IT, cybersecurity, healthcare, and security services, primarily for U.S. defense, intelligence, and federal civilian agencies. Through specialized subsidiaries such as Chenega MIOS, it delivers program staffing, managed services, and mission support across the U.S. and abroad. Founded in 1974 and headquartered in Anchorage, Alaska, it is privately held under Alaska Native Claims Settlement Act ownership.