Security Analytics Engineer-Public Trust Clearance Required

About this role

Design and maintain enterprise security analytics for a Security Fusion Center using Splunk, CRIBL, and detection engineering. This role engineers scalable security monitoring solutions, optimizes data pipelines, and develops advanced threat detection capabilities aligned with evolving adversary tactics.

What you'll do

• Design and develop enterprise security analytics, correlation searches, dashboards, and detection logic for the Security Fusion Center
• Administer and optimize Splunk Enterprise Security, UEBA, and SOAR platforms including data models and search performance
• Design and maintain CRIBL pipelines to collect, normalize, enrich, and route enterprise security telemetry
• Develop detection engineering analytics to identify advanced cyber threats and integrate new detections based on threat intelligence
• Integrate and manage multiple enterprise security tools (SIEM, EDR, identity, vulnerability, cloud platforms)
• Implement automation and AI-enabled capabilities to improve security analytics and operational efficiency

What they're looking for

• Splunk Enterprise Security (ES), UEBA, and SOAR administration and optimization
• CRIBL data pipeline design and implementation
• Detection engineering and security analytics development
• Log management, data normalization, and parsing
• Enterprise security tool integration (EDR, identity, cloud security)
• ServiceNow Security Incident Response (SIR) integration
• SPL (Splunk Processing Language) and search optimization
• Cybersecurity threat landscape and TTP knowledge

Benefits

• $145,000–$150,000 annual salary
• Public Trust clearance required position
• Northern Virginia location

Likely interview questions

• Describe your experience designing and optimizing Splunk data models and correlation searches for large-scale enterprise environments.
• How have you used CRIBL to improve log ingestion efficiency and reduce storage or licensing costs in a security operations environment?