Senior Splunk Detection Engineer

Job Summary

To support the National Science Foundation's Cybersecurity & Privacy Program, the full-time Senior Splunk Detection Engineer will enhance Security Operations Center effectiveness through high-fidelity detections, Risk-Based Alerting, and incident response collaboration while working remotely.

Key responsibilities

• Design, build, and continuously improve Splunk Enterprise Security detection content and correlation searches
• Implement Risk-Based Alerting strategies and improve detection quality to reduce false positives
• Collaborate with Incident Response and other teams to convert real-world incidents into enhanced detection capabilities

Required qualifications

• Active Public Trust clearance or the ability to obtain one
• Minimum seven years of cybersecurity experience, including four years in Detection Engineering or related fields
• Experience with Splunk Enterprise Security and building/tuning correlation searches
• Hands-on implementation experience with Risk-Based Alerting and practical Incident Response experience
• Strong knowledge of AWS security services such as GuardDuty and CloudTrail