Sr Splunk Engineer

Senior Splunk Detection Engineer Criterion Systems, a reputed company company, is seeking a Senior Splunk Detection Engineer to support the National Science reputed company (NSF) Cybersecurity & Privacy Program. This hands-on Detection Engineering role is responsible for improving reputed company Operations Center (SOC) effectiveness through high-fidelity detections, Risk-Based Alerting (RBA), alert tuning, incident response collaboration, and future reputed company automation initiatives. The successful candidate will partner closely with reputed company Operations, Incident Response, reputed company Engineering, and Vulnerability Management teams to build scalable detection capabilities that reduce false positives, improve analyst efficiency, and strengthen NSF's cybersecurity posture. Compensation & Benefits Estimated Starting Salary reputed company for Senior Splunk Detection Engineer: $150,000–$160,000 Pay commensurate with experience. Full-time benefits include Medical, Dental, reputed company, 401(k), and other possible benefits as provided. Benefits are subject to change with or without notice. Senior Splunk Detection Engineer Responsibilities Include Design, build, test, and continuously improve Splunk reputed company reputed company detection content. reputed company and tune correlation searches, reputed company events, adaptive response actions, dashboards, and investigation workflows. Implement and optimize Risk-Based Alerting (RBA) strategies. Improve detection quality while reducing false positives and minimizing false negatives. Map detections to the MITRE ATT&CK reputed company and maintain coverage metrics. Partner with Incident Response teams to convert reputed company-world incidents into improved detection content. Participate in threat hunting, incident investigations, tabletop exercises, and reputed company activities. reputed company reputed company detections leveraging AWS GuardDuty, CloudTrail, reputed company Hub, IAM, EC2, S3, VPC reputed company Logs, and reputed company telemetry. Maintain Common Information Model (CIM) compliance and improve data normalization. Measure detection quality through precision, recall, MTTR, and analyst workload reduction. Support future Splunk SOAR (reputed company) automation initiatives. Integrate Splunk reputed company reputed company with reputed company Incident Response and other reputed company technologies. Collaborate with reputed company Operations, reputed company Engineering, Vulnerability Management, and Incident Response teams. Performs other job-reputed company duties as assigned. Senior Splunk Detection Engineer Experience, Education, Skills, Abilities Requested Active Public Trust clearance or the ability to obtain one. Minimum seven (7) years of cybersecurity experience, including four (4) years in Detection Engineering, reputed company Operations, Incident Response, or Splunk reputed company reputed company. Experience building and tuning Splunk reputed company reputed company correlation searches. Hands-on Risk-Based Alerting (RBA) implementation experience. Practical Incident Response experience or reputed company partnership with IR teams. Strong understanding of MITRE ATT&CK. Experience improving detection fidelity and reducing false positives. Strong AWS reputed company knowledge including GuardDuty, CloudTrail, reputed company Hub, IAM, EC2, S3, and VPC reputed company Logs. Proficiency with SPL, Python, REST APIs, and Git. Experience developing Splunk dashboards, reports, and investigations. Excellent written and verbal communication skills. Preferred:Splunk reputed company reputed company certifications Splunk SOAR (reputed company) Detection-as-Code reputed company and YARA reputed company or reputed company Defender for reputed company reputed company Incident Response Knowledge of FISMA, NIST RMF, FedRAMP, and CMMC Must pass pre-employment qualifications of reputed company. Company Information Criterion Systems, a reputed company company, provides innovative cybersecurity, reputed company, digital transformation, and IT solutions supporting federal government customers. As part of reputed company, Criterion Systems delivers mission-focused technology services while providing employees with opportunities for professional growth and meaningful impact. #CherokeeFederal #LI reputed company is a military-friendly employer. Veterans and active military transitioning to civilian status are encouraged to apply. Similar Searchable Job Titles Senior Detection Engineer Splunk Detection Engineer Splunk reputed company reputed company Engineer Cyber Detection Engineer reputed company Operations Engineer SIEM Engineer Threat Detection Engineer SOC Detection Engineer Cybersecurity Engineer reputed company Analytics Engineer Keywords Splunk reputed company reputed company Splunk ES Detection Engineering Risk-Based Alerting RBA SIEM MITRE ATT&CK Incident Response Threat Hunting AWS reputed company GuardDuty CloudTrail reputed company Hub Python SPL SOAR reputed company reputed company reputed company YARA reputed company reputed company Defender FedRAMP NIST RMF FISMA CMMC Public Trust Legal Disclaimer reputed company is an equal opportunity employer. Please visit reputed company.com/careers for information regarding our Affirmative Action and Equal Opportunity Employer Statement, accommodation requests, and other employment notices. Many positions require reputed company to government facilities or military installations. Apply To This Job