Cybersecurity Specialist, Splunk Engineer

🔥 14 hours ago

🎸 Tennessee – Remote

🎸 Tennessee – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SAIC

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1969

☁️ SaaS

📣 Marketing

🏢 Enterprise

💰 $500M Post-IPO Debt - SAIC on 2025-09

SaaS • Marketing • Enterprise

SAIC is represented in the supplied content by marketing and product copy that matches Bitly — a cloud-based link management and QR-code platform. The material describes a SaaS offering for URL shortening, dynamic QR Codes, link analytics, mobile-friendly landing pages, branded links, UTM campaign tracking, digital business cards, developer APIs and AI-enhanced features. It targets marketers, developers, and enterprises across industries (retail, CPG, hospitality, media, healthcare, finance, education) and emphasizes integrations, analytics, and enterprise-grade capabilities. Note: the provided text appears to be Bitly’s website content rather than information about SAIC; if you intended the defense/technology firm SAIC (Science Applications International Corporation), please provide relevant content.

📋 Description

• Administer, install, configure, and maintain Splunk cloud, on-premises, and other SIEM/log management tools • Develop, audit, and optimize correlation rules and collaborate with ESOC to create detections • Build and maintain dashboards, reports, alerts, and visualizations • Create and optimize SPL queries and manage knowledge objects • Onboard and manage data sources including syslog, HEC, forwarders, and APIs • Manage deployment servers and forwarders • Maintain inputs, reporting, and alerting across Azure and AWS environments • Improve system performance and propose platform enhancements • Develop scripts and integrations using Python, Bash, and PowerShell • Use workflow automation tools with ServiceNow and other security/infrastructure platforms • Use regex for parsing, extraction, and automation • Document data-ingestion procedures and maintain access controls for compliance • Create configuration standards, policies, and procedures • Develop program metrics to measure monitoring effectiveness • Resolve incidents and issues and integrate changes through change-management processes • Train and mentor ESOC members on SIEM capabilities and best practices • Interface with analysts and business stakeholders to ensure tools, dashboards, and applications meet requirements • Communicate with teams and clients • Work across Linux and Windows platforms • Apply networking, workflow, and IT-reporting knowledge

🎯 Requirements

• Bachelor’s Degree and 5+ years cybersecurity operation related experience or software analyst/programming related experience, or master’s degree and 3+ years related experience • An additional 4 years of experience may be considered in lieu of a degree • Demonstrated experience administering and engineering Splunk • Must obtain the Splunk Core Certified Admin certification within the first 3 months of employment • Must obtain the Azure AZ-900: Microsoft Azure Fundamentals certification within 6 months of employment • Must obtain the AWS Cloud Practitioner certification within 9 months of employment • Availability to work flexible hours and be available for on call during rotations • Must be a US Citizen

🏖️ Benefits

• Flexible hours • On-call availability during rotations