Splunk Engineer
Herndon, VA · On-site
The Mid-Level Splunk Engineer supports enterprise-wide monitoring, alerting, and analytics across ... SOAR platforms) for improved workflow efficiency. • Document data source onboarding, dashboard ...
Splunk Engineer
Herndon, VA · On-site
The Mid-Level Splunk Engineer supports enterprise-wide monitoring, alerting, and analytics across ... SOAR platforms) for improved workflow efficiency. • Document data source onboarding, dashboard ...
Sr. Torq/SOAR Engineer with Security Clearance
Fairfax, VA · On-site
$140K - $190K/yr
The Sr. TORQ/SOAR Engineer serves as a technical leader and trusted authority for Security ... Integrate TORQ with enterprise security tools such as Elastic Stack, Splunk, CrowdStrike, cloud ...
Sr. Torq/SOAR Engineer with Security Clearance
Fairfax, VA · On-site
$140K - $190K/yr
The Sr. TORQ/SOAR Engineer serves as a technical leader and trusted authority for Security ... Integrate TORQ with enterprise security tools such as Elastic Stack, Splunk, CrowdStrike, cloud ...
Experience with, or interest in, learning, deploying, and maintaining Splunk SOAR. Experience operating in classified environments. Robust understanding of identity, SIEM, cybersecurity, and ...
Experience with, or interest in, learning, deploying, and maintaining Splunk SOAR. Experience operating in classified environments. Robust understanding of identity, SIEM, cybersecurity, and ...
Splunk Engineer 104-001
Washington, DC · On-site
SOAR, IT Services Infrastructure (ITSI), User Behavior Analysis (UBA), or ES (SIEM). Works with customers to plan and implement complex Splunk customer solutions. Skill Level 4 : * Skills and Tasks
Splunk Engineer 104-001
Washington, DC · On-site
SOAR, IT Services Infrastructure (ITSI), User Behavior Analysis (UBA), or ES (SIEM). Works with customers to plan and implement complex Splunk customer solutions. Skill Level 4 : * Skills and Tasks
SOC Analyst
Saint Petersburg, FL · On-site
SOAR: Palo Alto XSOAR, Splunk SOAR * Forensics: FTK Imager, Autopsy, Wireshark, Procmon Preferred Certifications: * GIAC Certified Incident Handler (GCIH) * GIAC Certified Forensic Analyst (GCFA)
Quick apply
SOC Analyst
Saint Petersburg, FL · On-site
SOAR: Palo Alto XSOAR, Splunk SOAR * Forensics: FTK Imager, Autopsy, Wireshark, Procmon Preferred Certifications: * GIAC Certified Incident Handler (GCIH) * GIAC Certified Forensic Analyst (GCFA)
Senior Splunk Engineer
Springfield, VA · On-site
$85K - $185K/yr
Intermediate to Advanced Spunk certifications (e.g., Splunk Enterprise Security Certified Admin, Splunk IT Service intelligence certified admin, Splunk SOAR Certified Automation Developer) Ansible ...
Senior Splunk Engineer
Springfield, VA · On-site
$85K - $185K/yr
Intermediate to Advanced Spunk certifications (e.g., Splunk Enterprise Security Certified Admin, Splunk IT Service intelligence certified admin, Splunk SOAR Certified Automation Developer) Ansible ...
Splunk Engineer
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Sr. Splunk Engineer - TS/SCI with CI Poly | Chantilly, VA
Columbia, MD · Remote
$113K - $155K/yr
Experience with, or interest in, learning, deploying, and maintaining Splunk SOAR. * Experience with, or interest in, learning, deploying, and maintaining Splunk Enterprise Security. * Experience ...
New
Sr. Splunk Engineer - TS/SCI with CI Poly | Chantilly, VA
Columbia, MD · Remote
$113K - $155K/yr
Experience with, or interest in, learning, deploying, and maintaining Splunk SOAR. * Experience with, or interest in, learning, deploying, and maintaining Splunk Enterprise Security. * Experience ...
New
Splunk Engineer
Washington, DC · On-site
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
Washington, DC · On-site
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
Herndon, VA · On-site
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
Herndon, VA · On-site
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
Herndon, VA · On-site
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
Herndon, VA · On-site
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Sr. Splunk Engineer - TS/SCI with CI Poly | Chantilly, VA
Alexandria, VA · Remote
$122K - $168K/yr
Experience with, or interest in, learning, deploying, and maintaining Splunk SOAR. * Experience with, or interest in, learning, deploying, and maintaining Splunk Enterprise Security. * Experience ...
New
Sr. Splunk Engineer - TS/SCI with CI Poly | Chantilly, VA
Alexandria, VA · Remote
$122K - $168K/yr
Experience with, or interest in, learning, deploying, and maintaining Splunk SOAR. * Experience with, or interest in, learning, deploying, and maintaining Splunk Enterprise Security. * Experience ...
New
Splunk Engineer
Riverdale, MD · On-site
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Splunk Engineer
Riverdale, MD · On-site
$112K - $179K/yr
Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency. * Document data source onboarding, dashboard configuration, and ...
Sr. Splunk Engineer - TS/SCI with CI Poly | Chantilly, VA
Chantilly, VA · On-site
$117K - $160K/yr
Experience with, or interest in, learning, deploying, and maintaining Splunk SOAR. * Experience with, or interest in, learning, deploying, and maintaining Splunk Enterprise Security. * Experience ...
Sr. Splunk Engineer - TS/SCI with CI Poly | Chantilly, VA
Chantilly, VA · On-site
$117K - $160K/yr
Experience with, or interest in, learning, deploying, and maintaining Splunk SOAR. * Experience with, or interest in, learning, deploying, and maintaining Splunk Enterprise Security. * Experience ...
Sr. Splunk Engineer - TS/SCI with CI Poly | Chantilly, VA
Washington, DC · Remote
$129K - $177K/yr
Experience with, or interest in, learning, deploying, and maintaining Splunk SOAR. * Experience with, or interest in, learning, deploying, and maintaining Splunk Enterprise Security. * Experience ...
New
Sr. Splunk Engineer - TS/SCI with CI Poly | Chantilly, VA
Washington, DC · Remote
$129K - $177K/yr
Experience with, or interest in, learning, deploying, and maintaining Splunk SOAR. * Experience with, or interest in, learning, deploying, and maintaining Splunk Enterprise Security. * Experience ...
New
Security Operations Center Cloud Engineer
Coral Gables, FL · On-site +1
$165/hr
Develop, document, and automate cloud incident response procedures using SOAR platforms such as Splunk SOAR. * Work with infrastructure and DevOps teams to improve visibility and security posture ...
Security Operations Center Cloud Engineer
Coral Gables, FL · On-site +1
$165/hr
Develop, document, and automate cloud incident response procedures using SOAR platforms such as Splunk SOAR. * Work with infrastructure and DevOps teams to improve visibility and security posture ...
Security Operations Center Cloud Engineer
Coral Gables, FL · On-site
$165/hr
Develop, document, and automate cloud incident response procedures using SOAR platforms such as Splunk SOAR. * Work with infrastructure and DevOps teams to improve visibility and security posture ...
Security Operations Center Cloud Engineer
Coral Gables, FL · On-site
$165/hr
Develop, document, and automate cloud incident response procedures using SOAR platforms such as Splunk SOAR. * Work with infrastructure and DevOps teams to improve visibility and security posture ...
Splunk Soar information
See salary details
$40.87 - $44.12
5% of jobs
$44.12 - $47.38
2% of jobs
$47.38 - $50.63
7% of jobs
$53.14 is the 25th percentile. Wages below this are outliers.
$50.63 - $53.89
14% of jobs
$53.89 - $57.15
8% of jobs
The median wage is $60.40 / hr.
$57.15 - $60.40
14% of jobs
$60.40 - $63.66
14% of jobs
$65.90 is the 75th percentile. Wages above this are outliers.
$63.66 - $66.91
17% of jobs
$66.91 - $70.17
17% of jobs
$70.17 - $73.43
2% of jobs
$73.43 - $76.68
1% of jobs
$40
$60
$76
How much do splunk soar jobs pay per hour?
As of Aug 16, 2026, the average hourly pay for splunk soar in the United States is $60.17, according to ZipRecruiter salary data. Most workers in this role earn between $53.12 and $66.35 per hour, depending on experience, location, and employer.
What is the difference between Splunk Soar vs Splunk Security Analyst?
| Aspect | Splunk Soar | Splunk Security Analyst |
|---|---|---|
| Certifications | Splunk Certified SOAR User, Security certifications | CompTIA Security+, CISSP, Splunk certifications |
| Work Environment | Security operations centers, incident response teams | Security teams, SOCs, incident analysis |
| Primary Focus | Automating security workflows, incident response automation | Monitoring security alerts, analyzing threats |
Splunk Soar specializes in automating security incident response and streamlining workflows within security operations centers. In contrast, Splunk Security Analysts focus on monitoring security alerts, analyzing threats, and supporting incident investigations. While both roles require security knowledge and Splunk certifications, Splunk Soar emphasizes automation skills, whereas Security Analysts focus on threat analysis and monitoring.
More about Splunk Soar jobs
What cities are hiring for Splunk Soar jobs?
Cities with the most Splunk Soar job openings:
What states have the most Splunk Soar jobs?
States with the most job openings for Splunk Soar jobs include:
What job categories do people searching Splunk Soar jobs look for?
The top searched job categories for Splunk Soar jobs are:
Peraton rating
8.3
Based on 56 frontline employees who took The Breakroom Quiz
51st of 224 rated it services
Job description
Job Summary:
Peraton is a next-generation national security company that drives missions of consequence. The Mid-Level Splunk Engineer supports enterprise-wide monitoring, alerting, and analytics across operational and security environments, developing and maintaining custom dashboards and ensuring data integrity and system performance.
Responsibilities:
• Design, develop, and maintain custom Splunk dashboards, alerts, and reports to support both NOC and SOC operations.
• Onboard new data sources including network appliances, servers, security tools, and applications using forwarders, APIs, and syslog integrations.
• Implement data normalization using the Splunk Common Information Model (CIM) to support consistent reporting and event correlation.
• Develop and optimize SPL queries, regex extractions, and macros for high-performing searches and visualizations.
• Configure and tune threshold-based and adaptive alerts for system performance, security, and application availability.
• Collaborate with NOC and SOC analysts to define KPIs and ensure accurate visibility into network health and security posture.
• Support incident detection, triage, and root cause analysis using Splunk dashboards and search tools.
• Monitor and maintain the health and performance of Splunk Enterprise / Splunk Cloud environments.
• Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency.
• Document data source onboarding, dashboard configuration, and analytic processes in accordance with program SOPs.
Qualifications:
Required:
• TS/SCI with polygraph clearance adjudication or ability to obtain SCI and pass a poly
• Bachelor's degree in an area applicable to the position with 5+ years relevant experience. Will consider additional 4 years of experience in lieu of degree
• Active CompTIA Security+, CySA+, CASP+, CISSP, or equivalent DoD 8570 IAT Level II.
• 3-5 years of hands-on experience administering, configuring, and developing within Splunk Enterprise or Splunk Cloud environments.
• Demonstrated experience designing and maintaining custom dashboards, reports, and alerting frameworks.
• Strong proficiency in Splunk Search Processing Language (SPL), field extractions, and data model creation.
• Familiarity with Linux and Windows server environments, network protocols (TCP/IP, SNMP, syslog), and application log ingestion.
• Understanding of NOC/SOC workflows, event correlation, and log management best practices.
• Experience troubleshooting data ingestion, indexing, and search performance issues.
• Excellent communication, documentation, and collaboration skills.
Preferred:
• Current Splunk Core Certified Power User, Admin, or Architect certification.
• Experience supporting federal or DoD environments and familiarity with RMF (Risk Management Framework).
• Experience with Python scripting, REST APIs, or JSON/XML parsing for custom integrations.
• Working knowledge of NIST 800-53/171, and log retention / audit evidence requirements.
• Experience with automation, orchestration, or SIEM/SOAR integration.
Company:
Peraton Fearlessly solving the toughest national security challenges. Founded in 1992, the company is headquartered in Woodbridge, USA, with a team of 10001+ employees. The company is currently Late Stage.
Peraton is a next-generation national security company that drives missions of consequence. The Mid-Level Splunk Engineer supports enterprise-wide monitoring, alerting, and analytics across operational and security environments, developing and maintaining custom dashboards and ensuring data integrity and system performance.
Responsibilities:
• Design, develop, and maintain custom Splunk dashboards, alerts, and reports to support both NOC and SOC operations.
• Onboard new data sources including network appliances, servers, security tools, and applications using forwarders, APIs, and syslog integrations.
• Implement data normalization using the Splunk Common Information Model (CIM) to support consistent reporting and event correlation.
• Develop and optimize SPL queries, regex extractions, and macros for high-performing searches and visualizations.
• Configure and tune threshold-based and adaptive alerts for system performance, security, and application availability.
• Collaborate with NOC and SOC analysts to define KPIs and ensure accurate visibility into network health and security posture.
• Support incident detection, triage, and root cause analysis using Splunk dashboards and search tools.
• Monitor and maintain the health and performance of Splunk Enterprise / Splunk Cloud environments.
• Integrate Splunk with automation/orchestration tools (e.g., Ansible, ServiceNow, SOAR platforms) for improved workflow efficiency.
• Document data source onboarding, dashboard configuration, and analytic processes in accordance with program SOPs.
Qualifications:
Required:
• TS/SCI with polygraph clearance adjudication or ability to obtain SCI and pass a poly
• Bachelor's degree in an area applicable to the position with 5+ years relevant experience. Will consider additional 4 years of experience in lieu of degree
• Active CompTIA Security+, CySA+, CASP+, CISSP, or equivalent DoD 8570 IAT Level II.
• 3-5 years of hands-on experience administering, configuring, and developing within Splunk Enterprise or Splunk Cloud environments.
• Demonstrated experience designing and maintaining custom dashboards, reports, and alerting frameworks.
• Strong proficiency in Splunk Search Processing Language (SPL), field extractions, and data model creation.
• Familiarity with Linux and Windows server environments, network protocols (TCP/IP, SNMP, syslog), and application log ingestion.
• Understanding of NOC/SOC workflows, event correlation, and log management best practices.
• Experience troubleshooting data ingestion, indexing, and search performance issues.
• Excellent communication, documentation, and collaboration skills.
Preferred:
• Current Splunk Core Certified Power User, Admin, or Architect certification.
• Experience supporting federal or DoD environments and familiarity with RMF (Risk Management Framework).
• Experience with Python scripting, REST APIs, or JSON/XML parsing for custom integrations.
• Working knowledge of NIST 800-53/171, and log retention / audit evidence requirements.
• Experience with automation, orchestration, or SIEM/SOAR integration.
Company:
Peraton Fearlessly solving the toughest national security challenges. Founded in 1992, the company is headquartered in Woodbridge, USA, with a team of 10001+ employees. The company is currently Late Stage.
About Peraton
Sourced by ZipRecruiter
At Peraton, we re at the forefront of delivering the next big thing every day. We re the partner of choice to help solve some of the world s most daunting challenges, delivering bold, new solutions to keep people around the world safer and more secure.
Industry
It services
Company size
10,000+ Employees
Headquarters location
Herndon, VA, US
Year founded
2017