ZipRecruiter

Log In

1

Splunk Siem Engineer Jobs (NOW HIRING)

IDBNY

SIEM Engineer

Manhattan, NY · On-site

$140K - $160K/yr

SIEM Engineer - Role Overview The SIEM Engineer is responsible for designing, implementing ... Splunk * QRadar * LogRhythm * Elastic Security * CrowdStrike NG-SIEM * Cribl * Strong knowledge of:

Eliassen Group

SIEM Engineer

Washington, DC · Remote

$71 - $76/hr

Administer and support SIEM platforms such as Splunk and Microsoft Sentinel. * Develop and maintain ... Experience Requirements: * 5+ years in SIEM engineering, SOC operations, or cybersecurity ...

Request Technology, LLC

SIEM Engineer

Chicago, IL · On-site

SIEM Engineer Salary: $150k-$160k + bonus Location: Chicago, IL or Austin, TX Hybrid: 3 days onsite ... Hands-on experience working with SIEM platforms such as Google SecOps (Chronicle), Splunk, Exabeam ...

Request Technology, LLC

SIEM Engineer

Austin, TX · On-site

SIEM Engineer Salary: $150k-$160k + bonus Location: Chicago, IL or Austin, TX Hybrid: 3 days onsite ... Hands-on experience working with SIEM platforms such as Google SecOps (Chronicle), Splunk, Exabeam ...

Request Technology, LLC

SIEM Engineer II

Chicago, IL · On-site

SIEM google SecOps chronicle splunk exabeam or Microsoft sentinel cribl exposure apis sys log or ... Engineer II , you will play a key role in the implementation, optimization, and day-to-day ...

Artech Information System LLC

Splunk Engineer

Plano, TX · On-site

We recruit world-class talent for IT, engineering, and other professional jobs at 70+ Fortune and ... Implement and support a SPLUNK SIEM solution. * Develop and implement processes and procedures to ...

Scigon Solutions

SIEM Engineer II

Austin, TX · On-site

$149K - $166K/yr

SIEM Engineer II Salary: $149,000-$166,000 What You ll Do Are you a hands-on security engineer ... SecOps), Splunk, Exabeam, Microsoft Sentinel). * Cribl Development - Support the design and ...

BeaconFire Solution

SIEM Data Engineer

Quincy, MA · On-site

$45 - $50/hr

for SIEM Data Engineer Position Who we are looking for: Cyber Data & Analytics team is looking for ... Splunk data administration, Cribl Stream, GitOps (Cribl code deployed using GitOps), Confluence ...

Diné Development Corporation

Senior Splunk Engineer

$107K - $146K/yr

Integrate Splunk with other critical systems (e.g., SIEM, DevOps tools, databases) and automate repetitive tasks using scripting and CI/CD tools. * Support & Troubleshooting: Act as a final ...

previous pagenext page

Showing results 21-40

All JobsSplunk Siem Engineer Jobs

Splunk Siem Engineer information

See salary details

$54.5K

$126K

$181K

How much do splunk siem engineer jobs pay per year?

As of Sep 10, 2026, the average yearly pay for splunk siem engineer in the United States is $126,034.00, according to ZipRecruiter salary data. Most workers in this role earn between $104,500.00 and $145,500.00 per year, depending on experience, location, and employer.

What does a Splunk SIEM Engineer do?

A Splunk SIEM Engineer is responsible for designing, implementing, and managing Splunk Security Information and Event Management (SIEM) solutions within an organization. They monitor security events, create dashboards, and develop alerts to detect and respond to potential threats. Their work involves integrating various data sources into Splunk, maintaining system performance, and ensuring compliance with security policies. Splunk SIEM Engineers also play a key role in incident response and help organizations improve their overall security posture.

What are the key skills and qualifications needed to thrive as a Splunk SIEM Engineer?

To thrive as a Splunk SIEM Engineer, you need strong expertise in security information and event management (SIEM), log analysis, scripting, and a background in cybersecurity, often supported by a computer science degree or related certifications. Familiarity with Splunk Enterprise Security, Splunk Query Language (SPL), and certifications like Splunk Certified Power User or Splunk Certified Admin are commonly required. Analytical thinking, problem-solving skills, and effective communication help engineers interpret security data and collaborate with IT teams. These skills are crucial for proactively detecting threats, optimizing security operations, and ensuring the resilience of organizational IT environments.

What are some common challenges faced by Splunk SIEM Engineers when integrating new data sources?

Splunk SIEM Engineers often encounter challenges such as inconsistent log formats, lack of documentation from data source owners, and ensuring data normalization for effective correlation and analysis. Additionally, dealing with high data volume while maintaining system performance and security compliance can be demanding. Close collaboration with IT, security teams, and application owners is critical to troubleshoot issues and fine-tune data onboarding processes.

What is the difference between Splunk Siem Engineer vs Security Analyst?

AspectSplunk Siem EngineerSecurity Analyst
CertificationsSplunk Certified Power User, Splunk Certified AdminCompTIA Security+, GIAC Security Essentials
Work EnvironmentFocus on configuring, maintaining, and optimizing Splunk SIEM toolsMonitor security alerts, investigate incidents, and implement security measures
Industry UsagePrimarily in cybersecurity, IT operations, and complianceAcross cybersecurity teams, incident response, and risk management

The Splunk Siem Engineer specializes in deploying and managing Splunk SIEM solutions, ensuring data ingestion and system performance. In contrast, the Security Analyst focuses on analyzing security data, investigating threats, and responding to incidents. While both roles require security knowledge and certifications, the engineer emphasizes system setup and maintenance, whereas the analyst emphasizes threat detection and response.

More about Splunk Siem Engineer jobs

What cities are hiring for Splunk Siem Engineer jobs?

Cities with the most Splunk Siem Engineer job openings:

What states have the most Splunk Siem Engineer jobs?

States with the most job openings for Splunk Siem Engineer jobs include:

What are popular job titles related to Splunk Siem Engineer jobs?

For Splunk Siem Engineer jobs, the most frequently searched job titles are:

Splunk Siem Engineer jobs near you
Infographic showing various Splunk Siem Engineer job openings in the United States as of September 2026, with employment types broken down into 1% Internship, 92% Full Time, 3% Part Time, and 4% Contract. Highlights an 85% Physical, 4% Hybrid, and 11% Remote job distribution, with an average salary of $126,034 per year, or $60.6 per hour.

Splunk/SIEM Engineer (5552) (TS/SCI) (Ft. Meade, MD)

Fort George G Meade, MD • On-site

SMX
IT Services • 1 - 5K employees
Learn more about SMXexternal

Full-time

Medical, Retirement, PTO

Posted 13 days ago

Job description

SMX is seeking a Security Information and Event Management (SIEM) Engineer responsible for implementing, configuring, and managing SIEM environments to support the organization's data analytics, security, and operational goals. This role focuses on onboarding new data sources, optimizing search queries, building dashboards and reports, and maintaining the stability of the SIEM infrastructure. The scope of this position includes all Army Intelligence security domains as defined by the Cybersecurity Director, and the Engineer will verify that all solutions and configurations meet the required security standards and compliance requirements. Additionally, the SIEM Engineer is responsible for ensuring ICS 500-27 audit compliance, maintaining the integrity and security of the SIEM system, and collaborating closely with analysts and architects to implement data solutions that provide real-time visibility into critical systems and processes.
This is a full-time onsite position in Ft. Meade, MD.
Essential Duties & Responsibilities
  • SIEM Platform Migration (Splunk to Elastic)
  • Lead the end-to-end migration of the enterprise Security Information and Event Management (SIEM) capability from Splunk to the Elastic Stack (Elasticsearch, Logstash, Kibana), including planning, stakeholder coordination, execution, and post-migration validation to ensure zero degradation in security monitoring and detection coverage.
  • Develop and manage the migration roadmap and program schedule, defining phased cutover milestones, resource requirements, and risk mitigation strategies while ensuring parallel operation of both platforms during transition to maintain continuous threat detection and incident response readiness.
  • Splunk Implementation and Maintenance:
    • Set up and configure Splunk instances, including forwarders, indexers, and search heads.
    • Onboard new data sources into Splunk while ensuring proper parsing, field extraction, and indexing.
    • Manage Splunk licenses, user access controls, and configurations to maintain stability and security.
  • Data Analysis and Visualization:
    • Build and optimize dashboards, alerts, and reports for security monitoring, IT operations, and business use cases.
    • Develop and enhance Splunk Search Processing Language (SPL) queries to facilitate advanced analytics.
    • Collaborate with teams to ensure that data sources meet the requirements for analysis and visualization.
  • Troubleshooting and Performance Tuning:
    • Monitor the health of the Splunk system, identify issues, and implement solutions to maintain high availability and performance.
    • Optimize queries, alerts, and settings to lower resource use and improve efficiency.
    • Resolve data ingestion and indexing issues.
  • Service Level Agreement (SLA) Management and Monitoring: •
    • Maintain and monitor the Service Level Agreement (SLA) of the Splunk system, ensuring that the system meets the required uptime, performance, and data ingestion targets.
    • Monitor the ingest of data sources, particularly high-value or high-impact systems, and alert stakeholders when these systems stop sending events or experience disruptions.
    • Develop and implement monitoring dashboards and alerts to quickly identify and respond to SLA breaches or data ingest issues.
  • Disaster Recovery and High Availability:
    • Design and implement disaster recovery and high availability solutions for the Splunk system, ensuring minimal downtime and data loss in the event of a disaster or system failure.
    • Develop and maintain disaster recovery plans, including backup and restore procedures, to ensure business continuity.
    • Configure and manage Splunk clustering, replication, and indexing to ensure high availability and redundancy.
  • Compliance and Security:
    • Maintain RMF (Risk Management Framework) ATO (Authority to Operate) compliance for the Splunk system, ensuring that all security controls and configurations are in place and up-to-date.
    • Ensure STIG (Security Technical Implementation Guide) compliance for the Splunk system, including configuration and vulnerability management.
    • Maintain accurate and up-to-date documentation, including:
    • Data flow diagrams to illustrate data ingestion and processing.
    • Architecture diagrams to depict the Splunk system architecture.
    • System inventories to track hardware and software components.
    • Collaborate with the security team to ensure that the Splunk system meets all relevant security requirements and standards.
  • SIEM Management:
    • Manage the onboarding process for new systems and log types, including:
    • Maintaining onboarding documents for each system/log type.
    • Developing and maintaining a detailed list of event codes per operating system and application type.
    • Ensure that all data sources are properly configured and sending events to the Splunk system.
    • Collaborate with analysts and architects to develop and implement use cases for security monitoring and incident response.
  • Collaboration and Support:
    • Collaborate with architects and analysts to create and implement solutions that align with the organization's objectives.
    • Provide technical support and assist end users with Splunk-related issues, ensuring timely resolution and minimal downtime.
  • Documentation and Continuous Improvement:
    • Document the configurations, workflows, and troubleshooting procedures to enhance team knowledge sharing.
    • Research and suggest enhancements to Splunk infrastructure and analytics capabilities.

Required Skills, Experience & Education
  • Active Top Secret (TS) security clearance with eligibility for SCI and NATO read-on before starting work (and willingness for SAP and CI Poly).
  • Certifications:
    • Splunk Enterprise Certified Architect
    • Security+ (or above)
  • Education
    • Bachelor's degree in computer science, Information Technology, or a similar field OR Minimum of 5 years of experience working with Splunk, including installation, configuration, and management.
  • Technical Skills
    • 2-3 years of experience an Elastic SIEM environment
    • Proficiency in managing Splunk components including forwarders, indexers, and search heads.
    • Strong understanding of SPL and the capacity to create custom dashboards and reports.
    • Experience in data parsing, field extraction, and indexing.

Desired Skills/Experience
  • Experience transitioning a SIEM environment from Splunk to Elastic
  • Experience supporting Splunk Enterprise Security (ES) or IT Service Intelligence (ITSI).
  • Familiarity with scripting languages (e.g., Python, Bash) for automation.
  • Knowledge of security operations, including SIEM best practices.

Application Deadline: September 28, 2026
#CJPOST
#LI-onsite
The SMX salary determination process takes into account a number of factors, including but not limited to, geographic location, Federal Government contract labor categories, relevant prior work experience, specific skills, education and certifications. At SMX, one of our Core Values is to Invest in Our People so we offer a competitive mix of compensation, learning & development opportunities, and benefits. Some key components of our robust benefits include health insurance, paid leave, and retirement.
The proposed salary for this position is:
$160,000-$190,000 USD
At SMX®, we are a team of technical and domain experts dedicated to enabling your mission. From priority national security initiatives for the DoD to highly assured and compliant solutions for healthcare, we understand that digital transformation is key to your future success.
We share your vision for the future and strive to accelerate your impact on the world. We bring both cutting edge technology and an expansive view of what's possible to every engagement. Our delivery model and unique approaches harness our deep technical and domain knowledge, providing forward-looking insights and practical solutions to power secure mission acceleration.
SMX is an Equal Opportunity employer including disabilities and veterans.
Selected applicant may be subject to a background investigation and/or education verification.
SMX does not sponsor a new applicant for employment authorization or immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-2, E-3, L-1 and O-1, or any EADs or other forms of work authorization that require immigration support from an employer).
SMX logo

About SMX

Sourced by ZipRecruiter

Our tradition of delivering innovative, technical solutions dates back to 1995, however, you may know us better by one of our legacy company names: Trident Technologies, Smartronix, Datastrong or C2S Consulting Group. With the support of OceanSound Partners, our private equity investment sponsor, we began operating as one business starting in 2019 and became SMX in 2021. We operate in close proximity to our clients around the globe and have core locations in Alabama, California, DC Metro, Florida, Hawaii, Maryland, and Massachusetts. Today, as SMX, we are one team and together empower government and commercial enterprises to become more effective, innovative, and resilient, no matter what challenges they face.

Industry

It services

Company size

1,001 - 5,000 Employees

Headquarters location

Hollywood, MD, US

View All SMX Jobs

Apply