# Splunk Security Engineer

**Company**: GDIT
**Location**: BEL Mons - Supreme HQ Allied Powers EU (APC155)
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Salary**: $107,744 - $138,000
**Category**: Defence & Intelligence
**Industry**: Technology

**Apply**: https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/BEL-Mons---Supreme-HQ-Allied-Powers-EU-APC155/Splunk-Security-Engineer_RQ231823?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/splunk-security-engineer-7294efc9-ba4/

## Description

Advance your career while impacting our national security in cyber as a Splunk Security Engineer at GDIT. Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government.

As a Splunk Security Engineer, the work you’ll do at GDIT will be impactful to the mission of NATO SOFCOM. You will play a crucial role in providing Senior SIEM Engineering, Splunk Enterprise Security Administration, security data onboarding, and cyber analytics in support of NATO SOFCOM networks.

Responsibilities:

- Administer and optimize Splunk Enterprise Security, indexers, search heads, forwarders, deployment servers, indexes and license consumption.

- Develop and tune SPL queries, correlation searches, dashboards, alerts, security analytics and threat-detection use cases mapped to relevant tactics and techniques.

- Onboard and normalize authorized log sources, maintain Common Information Model mappings and validate log quality, integrity and retention.

- Support threat hunting, event triage, incident investigations, evidence collection and coordination with the cybersecurity team.

- Document approved configuration changes, operating procedures, deployment architecture, incident findings and SIEM health metrics.

- Support NATO/DoW compliance reporting and continuous improvement of detection coverage, with execution of changes through approved procedures.

- Design and develop solutions for customer systems and networks.

Requirements:

- Education: BA/BS or equivalent years of experience

- Experience: 5+ years of related experience

- Technical skills: Splunk, SPL queries, CIM tuning, Dashboard customization

- Certifications: IAT Level II or higher, Splunk Enterprise Certified Admin or Splunk Enterprise Security Certified Admin, and ITIL Foundation (within 90 days of hire)

- Security clearance level: Active Secret required to start

- Location: On-site in Mons, Belgium

Benefits:

- Growth: AI-powered career tool that identifies career steps and learning opportunities

- Support: An internal mobility team focused on helping you achieve your career goals

- Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off

- Community: Award-winning culture of innovation and a military-friendly workplace

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- Splunk
- SPL queries
- CIM tuning
- Dashboard customization
- IAT Level II
- ITIL Foundation

---

Source: [Apply at gdit.wd5.myworkdayjobs.com](https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/BEL-Mons---Supreme-HQ-Allied-Powers-EU-APC155/Splunk-Security-Engineer_RQ231823?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)