View all jobs

Senior Splunk Cybersecurity Engineer

  • Various Locations, Onsite
  • Law Enforcement/Security
Company Overview

UnityTec is an SBA-certified Woman-Owned Small Business (WOSB) delivering high-impact professional and technical services to government agencies. With deep expertise in Industrial and Enterprise Systems Modernization, FIAR (Financial Improvement and Audit Readiness), Industrial Facility Transformation, Program and Project Management, Enterprise Support and Consulting, and Advanced Analytics, we empower organizations to modernize operations and advance mission priorities. Our disciplined approach—grounded in dedicated talent, proactive planning, rigorous quality assurance, agile methodologies, cost-effective delivery, and uncompromising ethics—positions UnityTec as a trusted partner committed to achieving measurable, enduring results for our clients.

Job Overview

We are seeking a Senior Splunk Cybersecurity Engineer to join our team. You will design, operate, and enhance the Splunk Enterprise and Enterprise Security environment to detect, investigate, and prioritize cyber threats. The role combines SIEM engineering, security analytics, system administration, and incident-response support to strengthen enterprise cyber defense operations. This is an onsite position available in multiple locations.

Responsibilities include, but are not limited to:

SIEM Engineering and Splunk Enterprise Security Administration
  • Administer, maintain, and sustain the DLA Splunk Enterprise Log Management architecture, including Splunk Core, Splunk Enterprise Security (ES), and associated backend database infrastructure.
  • Plan, install, configure, upgrade, troubleshoot, back up, and perform daily maintenance for Splunk platform components.
  • Support the integration, performance, availability, and lifecycle management of enterprise logging and security-monitoring capabilities.
  • Ensure Splunk infrastructure remains reliable, scalable, and aligned with operational cybersecurity requirements.
Cyber Threat Detection and Security Analytics
  • Analyze security-relevant data from system logs, intrusion detection systems, threat intelligence reports, vendor sources, and other cybersecurity data feeds.
  • Develop and refine threat-detection logic, correlation searches, alerts, and use cases to identify suspicious activity and emerging threats.
  • Create Splunk ES rules, reports, trends, data monitors, active channels, and analytics that improve enterprise threat visibility.
  • Optimize data mining and security-event analysis across the DLA environment to identify high-risk conditions and actionable indicators.
Dashboard Development and Security Reporting
  • Design and build customized Splunk dashboards and reports using threat data to provide clear, actionable visibility into security events and operational risk.
  • Configure dashboards to elevate high-priority threats and incidents to CERT Incident Handlers and other response stakeholders.
  • Translate complex security and operational data into meaningful visualizations, metrics, and reporting products for technical and management audiences.
  • Continuously improve reporting capabilities to support threat prioritization, situational awareness, and informed cybersecurity decision-making.
Incident Response and Information Assurance Support
  • Provide technical analysis and recommendations in support of CERT Incident Handlers and site Information Assurance Managers.
  • Assist with the identification, analysis, escalation, and resolution of cybersecurity incidents and vulnerabilities.
  • Apply structured analytical approaches to resolve cybersecurity workflow, organizational, planning, and technology-related challenges.
  • Support security engineering activities throughout information-system planning, design, development, testing, demonstration, and integration.
Cybersecurity Engineering and Systems Integration
  • Perform security engineering activities that integrate electronic processes, cybersecurity methodologies, and technical solutions to address enterprise system problems.
  • Analyze information-security requirements and ensure security capabilities are incorporated throughout the system lifecycle.
  • Collaborate with infrastructure, system administration, cybersecurity operations, and program stakeholders to implement effective security solutions.
  • Apply systematic problem-solving methods to improve cybersecurity processes, technologies, and operational outcomes.
Required Qualifications:
  • At least one (1) of the following certifications:
    • Certified Ethical Hacker (CEH)
    • CompTIA Cloud plus (Cloud+)
    • CompTIA Cybersecurity Analyst plus (CySA+)
    • GIAC Continuous Monitoring (GMON)
    • GIAC Security Essentials Certification (GSEC)
    • GIAC Response and Industrial Defense (GRID)
    • CompTIA Penetration Tester plus (PenTest+)
    • CompTIA Security plus (Security+)
    • Systems Security Certified Practitioner (SSCP)
    • Certified Cloud Security Professional (CCSP)
    • Global Industrial Cyber Security Professional (GICSP)
    • CompTIA Security plus (Security+)
  • At least one of the following Computing Environment certifications: Linux+ or Splunk Administrator
  • A minimum of seven (7) years of relevant IT experience.
  • Experience creating custom dashboards and reports in Splunk using threat data.
  • Experience in the integration and sustainment of Splunk Core and Splunk Enterprise Security (ES).
  • A bachelor’s degree in a technical field of study
Preferred Qualifications:
  • A master’s degree in a technical field of study
Clearance Requirements:
  • Must be a U.S. citizen.
  • Must possess a DoD current Secret clearance.
UnityTec is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.