Splunk Engineer - TS/SCI (Washington, DC)

About this role

GuidePoint Security seeks an experienced Splunk Engineer with TS/SCI clearance to implement and operate security solutions for federal government clients. You'll design Splunk deployments integrated with advanced cyber defense tools, manage threat detection and analysis, and support compliance frameworks in complex environments.

What you'll do

• Deploy, configure, and manage Splunk Enterprise environments with systems administration tasks including installation, upgrades, and troubleshooting
• Integrate Splunk with security tools like HBSS, ESM, NSM, NetFlow, and IDS for threat monitoring and detection
• Create custom dashboards, write queries, generate reports, and configure alerts and notifications
• Perform functional testing, data validation, and log ingestion within Splunk environments
• Support risk management and security compliance for cyber defense tools
• Analyze threats and develop countermeasures for large, complex networks

What they're looking for

• Splunk Enterprise (3+ years) with Architect or Consultant Certification required
• Windows and Linux Server administration and troubleshooting
• Custom dashboard creation and query writing
• Log ingestion and parsing within Splunk
• DoD Risk Management Framework knowledge
• Data modeling and fields abstraction
• Security tool integration and evaluation
• Problem-solving and communication skills