Splunk Engineer
Herndon, VA · On-site
The Mid-Level Splunk Engineer supports enterprise-wide monitoring, alerting, and analytics ... SOAR platforms) for improved workflow efficiency. • Document data source onboarding, dashboard ...
Splunk Engineer
Herndon, VA · On-site
The Mid-Level Splunk Engineer supports enterprise-wide monitoring, alerting, and analytics ... SOAR platforms) for improved workflow efficiency. • Document data source onboarding, dashboard ...
Experience with, or interest in, learning, deploying, and maintaining Splunk SOAR. Experience operating in classified environments. Robust understanding of identity, SIEM, cybersecurity, and ...
Experience with, or interest in, learning, deploying, and maintaining Splunk SOAR. Experience operating in classified environments. Robust understanding of identity, SIEM, cybersecurity, and ...
12688 - Sr. Splunk Engineer
Chantilly, VA · On-site
$117K - $160K/yr
Experience with, or interest in, learning, deploying, and maintaining Splunk SOAR. * Experience with, or interest in, learning, deploying, and maintaining Splunk Enterprise Security. * Experience ...
12688 - Sr. Splunk Engineer
Chantilly, VA · On-site
$117K - $160K/yr
Experience with, or interest in, learning, deploying, and maintaining Splunk SOAR. * Experience with, or interest in, learning, deploying, and maintaining Splunk Enterprise Security. * Experience ...
Splunk Engineer 104-001
Washington, DC · On-site
SOAR, IT Services Infrastructure (ITSI), User Behavior Analysis (UBA), or ES (SIEM). Works with customers to plan and implement complex Splunk customer solutions. Skill Level 4 : * Skills and Tasks
Splunk Engineer 104-001
Washington, DC · On-site
SOAR, IT Services Infrastructure (ITSI), User Behavior Analysis (UBA), or ES (SIEM). Works with customers to plan and implement complex Splunk customer solutions. Skill Level 4 : * Skills and Tasks
SOC Analyst
Saint Petersburg, FL · On-site
SOAR: Palo Alto XSOAR, Splunk SOAR * Forensics: FTK Imager, Autopsy, Wireshark, Procmon Preferred Certifications: * GIAC Certified Incident Handler (GCIH) * GIAC Certified Forensic Analyst (GCFA)
Quick apply
SOC Analyst
Saint Petersburg, FL · On-site
SOAR: Palo Alto XSOAR, Splunk SOAR * Forensics: FTK Imager, Autopsy, Wireshark, Procmon Preferred Certifications: * GIAC Certified Incident Handler (GCIH) * GIAC Certified Forensic Analyst (GCFA)
Splunk Engineer
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
Herndon, VA · On-site
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
Herndon, VA · On-site
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
Herndon, VA · On-site
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
Herndon, VA · On-site
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
Herndon, VA · On-site
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
Herndon, VA · On-site
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Security Operations Center Cloud Engineer
Coral Gables, FL · On-site +1
$165/hr
Develop, document, and automate cloud incident response procedures using SOAR platforms such as Splunk SOAR. * Work with infrastructure and DevOps teams to improve visibility and security posture ...
Security Operations Center Cloud Engineer
Coral Gables, FL · On-site +1
$165/hr
Develop, document, and automate cloud incident response procedures using SOAR platforms such as Splunk SOAR. * Work with infrastructure and DevOps teams to improve visibility and security posture ...
Splunk Engineer
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Security Operations Center Cloud Engineer
Coral Gables, FL · On-site
$165/hr
Develop, document, and automate cloud incident response procedures using SOAR platforms such as Splunk SOAR. * Work with infrastructure and DevOps teams to improve visibility and security posture ...
Security Operations Center Cloud Engineer
Coral Gables, FL · On-site
$165/hr
Develop, document, and automate cloud incident response procedures using SOAR platforms such as Splunk SOAR. * Work with infrastructure and DevOps teams to improve visibility and security posture ...
This fully remote role involves using Splunk Phantom to enhance security operations and integrate AI services. The ideal candidate has extensive experience in SOAR automation, excellent problem ...
New
This fully remote role involves using Splunk Phantom to enhance security operations and integrate AI services. The ideal candidate has extensive experience in SOAR automation, excellent problem ...
New
Splunk Engineer
Riverdale, MD · On-site
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
Riverdale, MD · On-site
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
SOC Engineer 2 - Secret Clearance with Security Clearance
Fulton, MD · On-site
$105K - $125K/yr
... Splunk SOAR playbooks to automate incident response workflows · Troubleshoot ingestion, indexing, and search performance issues within distributed Splunk environments · Investigate alerts and ...
SOC Engineer 2 - Secret Clearance with Security Clearance
Fulton, MD · On-site
$105K - $125K/yr
... Splunk SOAR playbooks to automate incident response workflows · Troubleshoot ingestion, indexing, and search performance issues within distributed Splunk environments · Investigate alerts and ...
SOC Engineer 2 - Secret Clearance with Security Clearance
Raleigh, NC · On-site
$105K - $125K/yr
... Splunk SOAR playbooks to automate incident response workflows · Troubleshoot ingestion, indexing, and search performance issues within distributed Splunk environments · Investigate alerts and ...
SOC Engineer 2 - Secret Clearance with Security Clearance
Raleigh, NC · On-site
$105K - $125K/yr
... Splunk SOAR playbooks to automate incident response workflows · Troubleshoot ingestion, indexing, and search performance issues within distributed Splunk environments · Investigate alerts and ...
Lead implementation and optimization of SIEM platforms (e.g., Splunk) to enhance threat detection and alert fidelity. * Build and maintain SOAR playbooks to automate incident response actions and ...
Lead implementation and optimization of SIEM platforms (e.g., Splunk) to enhance threat detection and alert fidelity. * Build and maintain SOAR playbooks to automate incident response actions and ...
Splunk Developer
Charlotte, NC · On-site
ESSENTIAL SKILLS: · Min. 2 years of experience in customization on any SOAR (Security ... Splunk. DESIRED SKILLS: · Web development frontend skills: JavaScript, jQuery, HTML/CSS · ...
Quick apply
Splunk Developer
Charlotte, NC · On-site
ESSENTIAL SKILLS: · Min. 2 years of experience in customization on any SOAR (Security ... Splunk. DESIRED SKILLS: · Web development frontend skills: JavaScript, jQuery, HTML/CSS · ...
Splunk Soar information
See salary details
$40.87 - $44.12
5% of jobs
$44.12 - $47.38
2% of jobs
$47.38 - $50.63
7% of jobs
$53.14 is the 25th percentile. Wages below this are outliers.
$50.63 - $53.89
14% of jobs
$53.89 - $57.15
8% of jobs
The median wage is $60.40 / hr.
$57.15 - $60.40
14% of jobs
$60.40 - $63.66
14% of jobs
$65.90 is the 75th percentile. Wages above this are outliers.
$63.66 - $66.91
17% of jobs
$66.91 - $70.17
17% of jobs
$70.17 - $73.43
2% of jobs
$73.43 - $76.68
1% of jobs
$40
$60
$76
How much do splunk soar jobs pay per hour?
As of Jul 6, 2026, the average hourly pay for splunk soar in the United States is $60.17, according to ZipRecruiter salary data. Most workers in this role earn between $53.12 and $66.35 per hour, depending on experience, location, and employer.
What is the difference between Splunk Soar vs Splunk Security Analyst?
| Aspect | Splunk Soar | Splunk Security Analyst |
|---|---|---|
| Certifications | Splunk Certified SOAR User, Security certifications | CompTIA Security+, CISSP, Splunk certifications |
| Work Environment | Security operations centers, incident response teams | Security teams, SOCs, incident analysis |
| Primary Focus | Automating security workflows, incident response automation | Monitoring security alerts, analyzing threats |
Splunk Soar specializes in automating security incident response and streamlining workflows within security operations centers. In contrast, Splunk Security Analysts focus on monitoring security alerts, analyzing threats, and supporting incident investigations. While both roles require security knowledge and Splunk certifications, Splunk Soar emphasizes automation skills, whereas Security Analysts focus on threat analysis and monitoring.
More about Splunk Soar jobs
What cities are hiring for Splunk Soar jobs? Cities with the most Splunk Soar job openings:
What states have the most Splunk Soar jobs? States with the most job openings for Splunk Soar jobs include:
What job categories do people searching Splunk Soar jobs look for? The top searched job categories for Splunk Soar jobs are:
Peraton rating
8.2
Based on 53 frontline employees who took The Breakroom Quiz
47th of 207 rated it services
Job description
Job Summary:
Peraton is a next-generation national security company that drives missions of consequence. The Mid-Level Splunk Engineer supports enterprise-wide monitoring, alerting, and analytics, ensuring data integrity and system performance across mission-critical networks and applications.
Responsibilities:
• Design, develop, and maintain custom Splunk dashboards, alerts, and reports to support both NOC and SOC operations.
• Onboard new data sources including network appliances, servers, security tools, and applications using forwarders, APIs, and syslog integrations.
• Implement data normalization using the Splunk Common Information Model (CIM) to support consistent reporting and event correlation.
• Develop and optimize SPL queries, regex extractions, and macros for high-performing searches and visualizations.
• Configure and tune threshold-based and adaptive alerts for system performance, security, and application availability.
• Collaborate with NOC and SOC analysts to define KPIs and ensure accurate visibility into network health and security posture.
• Support incident detection, triage, and root cause analysis using Splunk dashboards and search tools.
• Monitor and maintain the health and performance of Splunk Enterprise / Splunk Cloud environments.
• Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency.
• Document data source onboarding, dashboard configuration, and analytic processes in accordance with program SOPs.
Qualifications:
Required:
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field with 5+ years of relevant experience; Master's degree in Computer Science, Information Systems, Cybersecurity, or related field with 3+ years of relevant experience; or 4+ additional years of experience in lieu of a degree.
• TS/SCI with polygraph clearance adjudication
• 3-5 years of hands-on experience administering, configuring, and developing within Splunk Enterprise or Splunk Cloud environments.
• Demonstrated experience designing and maintaining custom dashboards, reports, and alerting frameworks.
• Strong proficiency in Splunk Search Processing Language (SPL), field extractions, and data model creation.
• Familiarity with Linux and Windows server environments, network protocols (TCP/IP, SNMP, syslog), and application log ingestion.
• Understanding of NOC/SOC workflows, event correlation, and log management best practices.
• Experience troubleshooting data ingestion, indexing, and search performance issues.
• Excellent communication, documentation, and collaboration skills.
Preferred:
• Current Splunk Core Certified Power User, Admin, or Architect certification.
• Active CompTIA Security+, CySA+, CASP+, CISSP, or equivalent DoD 8570 IAT Level II.
• Experience supporting federal or DoD environments and familiarity with RMF (Risk Management Framework).
• Experience with Python scripting, REST APIs, or JSON/XML parsing for custom integrations.
• Working knowledge of NIST 800-53/171, and log retention / audit evidence requirements.
• Experience with automation, orchestration, or SIEM/SOAR integration.
Company:
Peraton Fearlessly solving the toughest national security challenges. Founded in 1992, the company is headquartered in Woodbridge, USA, with a team of 10001+ employees. The company is currently Late Stage.
Peraton is a next-generation national security company that drives missions of consequence. The Mid-Level Splunk Engineer supports enterprise-wide monitoring, alerting, and analytics, ensuring data integrity and system performance across mission-critical networks and applications.
Responsibilities:
• Design, develop, and maintain custom Splunk dashboards, alerts, and reports to support both NOC and SOC operations.
• Onboard new data sources including network appliances, servers, security tools, and applications using forwarders, APIs, and syslog integrations.
• Implement data normalization using the Splunk Common Information Model (CIM) to support consistent reporting and event correlation.
• Develop and optimize SPL queries, regex extractions, and macros for high-performing searches and visualizations.
• Configure and tune threshold-based and adaptive alerts for system performance, security, and application availability.
• Collaborate with NOC and SOC analysts to define KPIs and ensure accurate visibility into network health and security posture.
• Support incident detection, triage, and root cause analysis using Splunk dashboards and search tools.
• Monitor and maintain the health and performance of Splunk Enterprise / Splunk Cloud environments.
• Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency.
• Document data source onboarding, dashboard configuration, and analytic processes in accordance with program SOPs.
Qualifications:
Required:
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field with 5+ years of relevant experience; Master's degree in Computer Science, Information Systems, Cybersecurity, or related field with 3+ years of relevant experience; or 4+ additional years of experience in lieu of a degree.
• TS/SCI with polygraph clearance adjudication
• 3-5 years of hands-on experience administering, configuring, and developing within Splunk Enterprise or Splunk Cloud environments.
• Demonstrated experience designing and maintaining custom dashboards, reports, and alerting frameworks.
• Strong proficiency in Splunk Search Processing Language (SPL), field extractions, and data model creation.
• Familiarity with Linux and Windows server environments, network protocols (TCP/IP, SNMP, syslog), and application log ingestion.
• Understanding of NOC/SOC workflows, event correlation, and log management best practices.
• Experience troubleshooting data ingestion, indexing, and search performance issues.
• Excellent communication, documentation, and collaboration skills.
Preferred:
• Current Splunk Core Certified Power User, Admin, or Architect certification.
• Active CompTIA Security+, CySA+, CASP+, CISSP, or equivalent DoD 8570 IAT Level II.
• Experience supporting federal or DoD environments and familiarity with RMF (Risk Management Framework).
• Experience with Python scripting, REST APIs, or JSON/XML parsing for custom integrations.
• Working knowledge of NIST 800-53/171, and log retention / audit evidence requirements.
• Experience with automation, orchestration, or SIEM/SOAR integration.
Company:
Peraton Fearlessly solving the toughest national security challenges. Founded in 1992, the company is headquartered in Woodbridge, USA, with a team of 10001+ employees. The company is currently Late Stage.
About Peraton
Sourced by ZipRecruiter
At Peraton, we re at the forefront of delivering the next big thing every day. We re the partner of choice to help solve some of the world s most daunting challenges, delivering bold, new solutions to keep people around the world safer and more secure.
Industry
It services
Company size
10,000+ Employees
Headquarters location
Herndon, VA, US
Year founded
2017