Mid-Level Splunk Engineer with Security Clearance

Position: Mid-Level Splunk Engineer
Location: Joint Base San Antonio (JBSA), TX — 100% On-Site
Security Clearance: Active TS/SCI Position Overview:
We are seeking an active TS/SCI cleared Mid-Level Splunk Engineer to join our team supporting the 16th Air Force at Joint Base San Antonio. In this role, you will deliver day-to-day engineering services centered on dashboard creation, data troubleshooting, alert tuning, and security detection support within Splunk Enterprise Security (ES). This on-site engagement is ideal for a candidate with 2+ years of Splunk experience looking to apply their skills in a high-impact military cyber environment.

Key Responsibilities & Scope of Work
Dashboarding & Visualizations: Create, troubleshoot, and optimize Splunk dashboards, data panels, and custom alerts to support operational situational awareness.

Detection Support: Assist in building, testing, and refining cybersecurity detection rules within Splunk Enterprise Security (ES).

Data Onboarding & Troubleshooting: Diagnose and resolve data ingestion issues, query errors, and dashboard performance bottlenecks.

Automation Engineering: Support the creation and maintenance of automated response actions and alert workflows.

Status Reporting: Maintain accurate task tracking and submit weekly status reports summarizing work accomplishments and blocking items.

Qualifications & Requirements
Clearance: Active TS/SCI Experience: 2+ years of hands-on experience working in Splunk engineering or administration roles.

Technical Skills: Strong proficiency with Splunk Core searching, dashboard development, and basic administration.
Hands-on experience working with Splunk Enterprise Security (ES) and standard SIEM workflows.
Solid understanding of log onboarding, field extractions, and SPL query construction. Preferred / Nice-to-Have
Working knowledge or exposure to Splunk SOAR (Phantom) or Splunk ITSI.
Splunk Core Certified Power User or Admin certification.