Splunk/SIEM Engineer (5522) (TS/SCI) (Ft. Meade, MD)
SMXFort Meade, Maryland, United States · Posted 2 days agoDescription
SMX is seeking a Security Information and Event Management (SIEM) Engineer responsible for implementing, configuring, and managing SIEM environments to support the organization’s data analytics, security, and operational goals. This role focuses on onboarding new data sources, optimizing search queries, building dashboards and reports, and maintaining the stability of the SIEM infrastructure. The scope of this position includes all Army Intelligence security domains as defined by the Cybersecurity Director, and the Engineer will verify that all solutions and configurations meet the required security standards and compliance requirements. Additionally, the SIEM Engineer is responsible for ensuring ICS 500-27 audit compliance, maintaining the integrity and security of the SIEM system, and collaborating closely with analysts and architects to implement data solutions that provide real-time visibility into critical systems and processes.
This is a full-time onsite position in Ft. Meade, MD.
Essential Duties & Responsibilities
-
SIEM Platform Migration (Splunk to Elastic)
-
Lead the end-to-end migration of the enterprise Security Information and Event Management (SIEM) capability from Splunk to the Elastic Stack (Elasticsearch, Logstash, Kibana), including planning, stakeholder coordination, execution, and post-migration validation to ensure zero degradation in security monitoring and detection coverage.
-
Develop and manage the migration roadmap and program schedule, defining phased cutover milestones, resource requirements, and risk mitigation strategies while ensuring parallel operation of both platforms during transition to maintain continuous threat detection and incident response readiness.
- Splunk Implementation and Maintenance:
- Set up and configure Splunk instances, including forwarders, indexers, and search heads.
- Onboard new data sources into Splunk while ensuring proper parsing, field extraction, and indexing.
- Manage Splunk licenses, user access controls, and configurations to maintain stability and security.
- Data Analysis and Visualization:
- Build and optimize dashboards, alerts, and reports for security monitoring, IT operations, and business use cases.
- Develop and enhance Splunk Search Processing Language (SPL) queries to facilitate advanced analytics.
- Collaborate with teams to ensure that data sources meet the requirements for analysis and visualization.
- Troubleshooting and Performance Tuning:
- Monitor the health of the Splunk system, identify issues, and implement solutions to maintain high availability and performance.
- Optimize queries, alerts, and settings to lower resource use and improve efficiency.
- Resolve data ingestion and indexing issues.
- Service Level Agreement (SLA) Management and Monitoring: •
- Maintain and monitor the Service Level Agreement (SLA) of the Splunk system, ensuring that the system meets the required uptime, performance, and data ingestion targets.
- Monitor the ingest of data sources, particularly high-value or high-impact systems, and alert stakeholders when these systems stop sending events or experience disruptions.
- Develop and implement monitoring dashboards and alerts to quickly identify and respond to SLA breaches or data ingest issues.
- Disaster Recovery and High Availability:
- Design and implement disaster recovery and high availability solutions for the Splunk system, ensuring minimal downtime and data loss in the event of a disaster or system failure.
- Develop and maintain disaster recovery plans, including backup and restore procedures, to ensure business continuity.
- Configure and manage Splunk clustering, replication, and indexing to ensure high availability and redundancy.
- Compliance and Security:
- Maintain RMF (Risk Management Framework) ATO (Authority to Operate) compliance for the Splunk system, ensuring that all security controls and configurations are in place and up-to-date.
- Ensure STIG (Security Technical Implementation Guide) compliance for the Splunk system, including configuration and vulnerability management.
- Maintain accurate and up-to-date documentation, including:
- Data flow diagrams to illustrate data ingestion and processing.
- Architecture diagrams to depict the Splunk system architecture.
- System inventories to track hardware and software components.
- Collaborate with the security team to ensure that the Splunk system meets all relevant security requirements and standards.
- SIEM Management:
- Manage the onboarding process for new systems and log types, including:
- Maintaining onboarding documents for each system/log type.
- Developing and maintaining a detailed list of event codes per operating system and application type.
- Ensure that all data sources are properly configured and sending events to the Splunk system.
- Collaborate with analysts and architects to develop and implement use cases for security monitoring and incident response.
- Collaboration and Support:
- Collaborate with architects and analysts to create and implement solutions that align with the organization’s objectives.
- Provide technical support and assist end users with Splunk-related issues, ensuring timely resolution and minimal downtime.
- Documentation and Continuous Improvement:
- Document the configurations, workflows, and troubleshooting procedures to enhance team knowledge sharing.
- Research and suggest enhancements to Splunk infrastructure and analytics capabilities.
Required Skills, Experience & Education
- Active Top Secret (TS) security clearance with eligibility for SCI and NATO read-on before starting work (and willingness for SAP and CI Poly).
- Certifications:
- Splunk Enterprise Certified Architect
- Security+ (or above)
- Education
- Bachelor’s degree in computer science, Information Technology, or a similar field OR Minimum of 5 years of experience working with Splunk, including installation, configuration, and management.
- Technical Skills
- 2-3 years of experience an Elastic SIEM environment
- Proficiency in managing Splunk components including forwarders, indexers, and search heads.
- Strong understanding of SPL and the capacity to create custom dashboards and reports.
- Experience in data parsing, field extraction, and indexing.
Desired Skills/Experience
- Experience transitioning a SIEM environment from Splunk to Elastic
- Experience supporting Splunk Enterprise Security (ES) or IT Service Intelligence (ITSI).
- Familiarity with scripting languages (e.g., Python, Bash) for automation.
- Knowledge of security operations, including SIEM best practices.
Application Deadline: September 28, 2026
#CJPOST
#LI-onsite
The SMX salary determination process takes into account a number of factors, including but not limited to, geographic location, Federal Government contract labor categories, relevant prior work experience, specific skills, education and certifications. At SMX, one of our Core Values is to Invest in Our People so we offer a competitive mix of compensation, learning & development opportunities, and benefits. Some key components of our robust benefits include health insurance, paid leave, and retirement.
At SMX®, we are a team of technical and domain experts dedicated to enabling your mission. From priority national security initiatives for the DoD to highly assured and compliant solutions for healthcare, we understand that digital transformation is key to your future success.
We share your vision for the future and strive to accelerate your impact on the world. We bring both cutting edge technology and an expansive view of what’s possible to every engagement. Our delivery model and unique approaches harness our deep technical and domain knowledge, providing forward-looking insights and practical solutions to power secure mission acceleration.
SMX is an Equal Opportunity employer including disabilities and veterans.
Selected applicant may be subject to a background investigation and/or education verification.
SMX does not sponsor a new applicant for employment authorization or immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-2, E-3, L-1 and O-1, or any EADs or other forms of work authorization that require immigration support from an employer).
Similar jobs
Est. 177,500 USD
SMX is seeking a Cybersecurity SME Senior SIGINT to support GISA at Fort Belvoir, VA. The successful candidate will have experience working as an ISSO on large Department of Defense contracts and leading a team of other…
Est. 137,450 USD
The Cyber Security Engineer will provide security engineering, compliance, and risk management support for cloud-based systems aligned with NIST SP 800-53, FedRAMP, and DoD IL4–6 requirements. The role will advise partne…
Est. 152,500 USD
cBEYONData + SMX is seeking a Senior Data Engineer to join our team in support of a Modernized Data Science Platform for a Federal customer. This role will support IT transformation and modernization efforts by designing…
Est. 137,500 USD
SMX is seeking an Automation Engineer, Mid to design, develop, and implement automation and orchestration solutions that enhance the efficiency, scalability, and resilience of the organization’s cybersecurity and network…
Est. 124,950 USD
SMX is seeking Software Engineers (Junior/Mid/Senior/SME) supporting the design and implementation of secure, scalable multi-cloud infrastructure, applications, and services in support of enterprise cloud migration and m…
Est. 150,000 USD
SMX is seeking a dynamic and experienced Technical Lead to guide a team of talented engineers in the design, development, and delivery of mission-critical solutions. This is a hybrid role for a leader who is passionate a…
Est. 137,450 USD
SMX is hiring a Data Engineer responsible for designing, building, and maintaining scalable data architecture that powers our AI, analytics and reporting. Collaborate closely with Analysts, AI Engineers, and Software Eng…
SMX is seeking a Senior Systems Engineer / ISR Communications professional to support the design, implementation, operation, security, and troubleshooting of enterprise and mission-focused network infrastructure. The ide…
Est. 152,500 USD
Outside Analytics has recently become a proud subsidiary of SMX, marking an exciting collaboration that enhances our collective capabilities to deliver cutting-edge digital transformation solutions. Are you interested in…
Est. 164,500 USD
The Operations Research (OR) Analyst - Optimization & Mathematical Programming Focus provides advanced optimization, resource allocation, and prescriptive analytics across a Federal Agency's personnel vetting, indust…
Est. 120,000 USD
SMX is seeking a Linux System Administrator to support an embedded lab environment at NAS Patuxent River. This role provides direct hands-on support for hardware, operating systems, and applications within an embedded en…
Est. 116,900 USD
SMX is seeking a Journeyman level SOC Analyst to support our NAWCAD customer onsite at the Patuxent River Naval Air Station. Essential Duties & Responsibilities Provide timely detection, identification, and alerting…
Est. 140,250 USD
We are seeking an experienced Cloud Architect to join our State and Local Platforms and Data Managed Services team. In this key role, you will design, implement, and manage cloud solutions across a diverse portfolio of c…
Est. 105,100 USD
We are looking for a skilled Cloud Engineer to join our State and Local Platforms and Data Managed Services team. As a core member of our operations group, you will work across multiple client environments, implementing,…
Est. 150,000 USD
SMX is looking for a Field Support Representative Operations to support SOCPAC J6 TACLAN operations across the PACOM Theater. The FSR Operations is a highly skilled IT specialist responsible for maintaining, troubleshoot…
Est. 129,000 USD
SMX is seeking a Knowledge Systems Integrator to support government client at Camp Smith. The Knowledge Systems Integrator (KSI) / Knowledge Manager will enable units to leverage emerging AI technologies and integrate th…
Est. 156,500 USD
SMX is seeking an AI Engineer and Integrator to support government client at Camp Smith. The AI Integrator serves as the client-facing AI integration lead and secondary AI Engineer. This role sits close to the client and…
Est. 81,200 USD
SMX is actively searching for a dynamic and adept Junior Cloud Engineer to support our government client in Huntsville, AL. This role emphasizes operational excellence, championed by a commitment to quality, articulate c…
Est. 147,750 USD
SMX has an immediate opportunity for a Software Developer who is excited to apply their talents to our customer's challenging project and one who will thrive in a collaborative environment. The ideal candidate is a recog…
Est. 128,500 USD
SMX is seeking an Azure DevSecOps Engineer supporting the design and implementation of secure, scalable multi-cloud infrastructure, applications, and services in support of enterprise cloud migration and mission-critical…
Est. 104,250 USD
SMX is seeking an Embedded Linux System Administrator to support a lab environment on-site at NAS Patuxent River. This position is expected to last through April 30, 2027. This role focuses on hands-on support of hardwar…
Est. 80,500 USD
SMX is seeking an FMV Analyst Journeyman to support 24/7 Intelligence, Surveillance, and Reconnaissance (ISR) operations conducting Processing, Exploitation, and Dissemination (PED) missions supporting Special Operations…
Est. 137,450 USD
How would you like to be part of a leadership team made up of experts and senior level staff who have experience, capacity and capability to lead large scale portfolios. The leadership team will foster the organizational…
Est. 208,050 USD
SMX is seeking a Senior Enterprise Solution Architect and Growth Lead for our State & Local Government practice. You will own product development, solution design, and technical delivery for complex, multi-agency clo…
Est. 215,600 USD
The Senior Solutions Architect, Department of War (DoW) Solutions will serve as a driving force and champion for building solutions and capabilities within SMX. In this position, you will be responsible for leading the d…
Est. 137,450 USD
SMX is seeking a Senior Solutions Architect to join a federal pursuit. How would you like to be part of a leadership team made up of experts and senior level staff who have experience, capacity and capability to lead lar…
Est. 156,500 USD
SMX is seeking an AI Engineer to support government client at Camp Smith. The AI Engineer designs, develops, tests, and improves AI-enabled systems that support client operations, business processes, and organizational K…
Est. 137,600 USD
SMX is seeking Cloud Systems Engineers (Junior/Mid/Senior/SME) supporting the design and implementation of secure, scalable multi-cloud infrastructure, applications, and services in support of enterprise cloud migration…
Est. 116,800 USD
SMX is actively searching for a dynamic and adept Senior Cloud Engineer to support our government client in Huntsville, AL. This role emphasizes operational excellence, championed by a commitment to quality, articulate c…
Est. 137,600 USD
SMX is seeking Information Assurance/Cybersecurity Specialists (Junior, Mid, and Senior) with a foundation in information systems, multi-cloud, network administration, systems administration, and cybersecurity. This role…