Splunk Engineer Jobs
Splunk Engineer jobs are open across cybersecurity, financial services, healthcare, defense, and government contracting, from junior analyst-adjacent roles to senior and principal engineers, with specializations in SIEM administration, observability, and security operations. Scan the live roles below and apply to whichever ones fit.
Find Splunk Engineer JobsLooking for remote work? View remote splunk engineer jobs →Overview
Showing 5 of 50+ Splunk Engineer jobs
Job ID:
J54995
Job Title:
Splunk Security Engineer
Location:
Redmond, WA
Duration:
12 Months + Extension
Domain Exposure:
Oil & Gas
Client:
To Be Discussed Later
Employment Type:
W-2, 1099, C2C
Work Authorization:
US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other
Job Title: Splunk Security Engineer
Location: Redmond, WA / Dallas, TX (Hybrid – 3 Days Onsite per Week)
Duration: 12+ Months
Bill Rate: $85/hr
Job Type: W-2, 1099, C2C
Client: To be Disclosed
Work Authorization: US Citizen, Green Card, OPT-EAD, CPT, H-1B, H4-EAD, Other
Job Description:
We are looking for an experienced Splunk Security Engineer with 7–8 years of experience in SIEM engineering, security monitoring, threat detection, and enterprise security operations. The candidate will be responsible for managing Splunk Enterprise and Splunk Enterprise Security platforms, integrating enterprise log sources, developing security dashboards, and implementing advanced threat detection solutions.
Roles and Responsibilities:
- Administer, configure, and maintain Splunk Enterprise and Splunk Enterprise Security (ES) platforms.
- Design and implement Splunk architecture, including deployment, configuration, and platform optimization.
- Onboard and integrate log sources from Windows, Linux, Active Directory, AWS, Azure, GCP, firewalls, EDR, IAM, and network security systems.
- Develop, maintain, and optimize SPL queries, dashboards, alerts, reports, and correlation searches.
- Configure log ingestion, parsing, normalization, indexing, and data retention policies.
- Troubleshoot log ingestion, parsing, indexing, CIM mapping, and data quality issues.
- Develop automated security monitoring solutions using SPL, Python, Bash, and SimpleXML.
- Design and implement detection rules and security use cases to improve threat detection capabilities.
- Perform proactive threat hunting using Splunk and security telemetry.
- Analyze security events and identify potential threats, vulnerabilities, and suspicious activities.
- Integrate threat intelligence feeds to improve security monitoring and detection.
- Conduct threat modeling using MITRE ATT&CK and Cyber Kill Chain frameworks.
- Collaborate with SOC and Incident Response teams during security investigations.
- Monitor Splunk performance and optimize search efficiency, indexing, and data retention.
- Support Splunk upgrades, migrations, deployment automation, and CI/CD activities.
- Prepare technical documentation and provide knowledge transfer to team members.
Required Skills:
- 7–8 years of experience in SIEM engineering and security monitoring.
- Strong hands-on experience with Splunk Enterprise and Splunk Enterprise Security.
- Expertise in SPL query development and troubleshooting.
- Experience onboarding and managing enterprise log sources.
- Strong knowledge of threat detection, threat hunting, and detection engineering.
- Experience developing and tuning SIEM alerts to reduce false positives.
- Strong understanding of Windows, Linux, networking, and cloud security.
- Knowledge of security operations, incident response, and threat intelligence.
- Familiarity with MITRE ATT&CK framework.
We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.
Job ID:
J54995
Job Title:
Splunk Security Engineer
Location:
Redmond, WA
Duration:
12 Months + Extension
Domain Exposure:
Oil & Gas
Client:
To Be Discussed Later
Employment Type:
W-2, 1099, C2C
Work Authorization:
US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other
Job Title: Splunk Security Engineer
Location: Redmond, WA / Dallas, TX (Hybrid – 3 Days Onsite per Week)
Duration: 12+ Months
Bill Rate: $85/hr
Job Type: W-2, 1099, C2C
Client: To be Disclosed
Work Authorization: US Citizen, Green Card, OPT-EAD, CPT, H-1B, H4-EAD, Other
Job Description:
We are looking for an experienced Splunk Security Engineer with 7–8 years of experience in SIEM engineering, security monitoring, threat detection, and enterprise security operations. The candidate will be responsible for managing Splunk Enterprise and Splunk Enterprise Security platforms, integrating enterprise log sources, developing security dashboards, and implementing advanced threat detection solutions.
Roles and Responsibilities:
- Administer, configure, and maintain Splunk Enterprise and Splunk Enterprise Security (ES) platforms.
- Design and implement Splunk architecture, including deployment, configuration, and platform optimization.
- Onboard and integrate log sources from Windows, Linux, Active Directory, AWS, Azure, GCP, firewalls, EDR, IAM, and network security systems.
- Develop, maintain, and optimize SPL queries, dashboards, alerts, reports, and correlation searches.
- Configure log ingestion, parsing, normalization, indexing, and data retention policies.
- Troubleshoot log ingestion, parsing, indexing, CIM mapping, and data quality issues.
- Develop automated security monitoring solutions using SPL, Python, Bash, and SimpleXML.
- Design and implement detection rules and security use cases to improve threat detection capabilities.
- Perform proactive threat hunting using Splunk and security telemetry.
- Analyze security events and identify potential threats, vulnerabilities, and suspicious activities.
- Integrate threat intelligence feeds to improve security monitoring and detection.
- Conduct threat modeling using MITRE ATT&CK and Cyber Kill Chain frameworks.
- Collaborate with SOC and Incident Response teams during security investigations.
- Monitor Splunk performance and optimize search efficiency, indexing, and data retention.
- Support Splunk upgrades, migrations, deployment automation, and CI/CD activities.
- Prepare technical documentation and provide knowledge transfer to team members.
Required Skills:
- 7–8 years of experience in SIEM engineering and security monitoring.
- Strong hands-on experience with Splunk Enterprise and Splunk Enterprise Security.
- Expertise in SPL query development and troubleshooting.
- Experience onboarding and managing enterprise log sources.
- Strong knowledge of threat detection, threat hunting, and detection engineering.
- Experience developing and tuning SIEM alerts to reduce false positives.
- Strong understanding of Windows, Linux, networking, and cloud security.
- Knowledge of security operations, incident response, and threat intelligence.
- Familiarity with MITRE ATT&CK framework.
We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.
See All 50 Splunk Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find Splunk Engineer JobsSplunk Engineer Job Market
Who's Hiring
Top Industries Hiring
- Technology & Software
- Electronics & Hardware
What Employers Look For
The qualifications that appear most often in splunk engineer jobs.
- Hands-on experience with Splunk Enterprise or Splunk Cloud administration
- Proficiency in Search Processing Language (SPL) for building queries and dashboards
- Experience configuring data inputs, forwarders, and index management
- Splunk Core Certified User or Power User certification preferred or required
- Familiarity with SIEM use cases, security operations, or IT operations monitoring
- Bachelor's degree in computer science, information technology, or a related field
Tips for Your Splunk Engineer Job Search
Tailor your resume to Splunk-specific keywords
Hiring managers search for SPL query writing, index management, forwarder configuration, and dashboard development. If your resume says 'log analysis' but not 'Splunk Search Processing Language,' automated screening will pass you over before a human ever reads it.
List your Splunk certifications prominently
Splunk Core Certified User, Power User, and Architect credentials carry real weight in applicant screening. Place them in a dedicated certifications section near the top of your resume, not buried in a skills list at the bottom.
Apply early to roles that fit
Migrate Mate lists splunk engineer openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Filter openings by deployment environment
Job listings often specify Splunk Cloud, Splunk Enterprise, or hybrid environments. Applying only to roles that match your hands-on experience means you can speak concretely in interviews rather than hedging on deployment details you haven't touched.
Prepare a working SPL query example for interviews
Many splunk engineer interviews include a live or take-home SPL challenge. Have a real query you've written, what problem it solved, and what the output looked like ready to walk through. Generic answers about 'writing searches' rarely satisfy technical panels.
Negotiate around certification reimbursement
Splunk certification costs add up fast across exams and renewal cycles. After an offer, ask whether the company covers exam fees and study materials. Many security-focused employers budget for this and expect candidates to ask.
Splunk Engineer Jobs: Frequently Asked Questions
Which companies are hiring the most splunk engineers?
Cisco, SpaceX, and BNH are hiring the most splunk engineers right now, with openings concentrated in Virginia, Texas, and Florida, based on current listings on Migrate Mate as of November 2026. Defense contractors, managed security service providers, and large financial institutions tend to post the highest volumes of these roles.
How many splunk engineer jobs are remote?
About 83% of splunk engineer openings are fully remote or hybrid as of November 2026, reflecting strong demand from employers who prioritize availability over location. Roles focused on Splunk Cloud administration, dashboard development, and security monitoring tend to have the highest concentration of remote and hybrid arrangements, while on-premises enterprise deployments more often require on-site work.
How do you become a splunk engineer?
Start by learning Splunk fundamentals through the free Splunk training courses available on the company's official education platform, then earn the Core Certified User credential. Build hands-on experience by deploying a free Splunk trial instance and ingesting real log data. Progress to the Power User certification, develop a portfolio of dashboards and SPL queries, and apply to junior or associate roles in IT operations or security operations centers.
Can you get a splunk engineer job with little experience?
Yes, entry-level splunk engineer roles exist, particularly at managed security service providers and government contractors who train candidates internally. Focus on earning at least the Core Certified User certification, build a home lab that demonstrates forwarder setup and dashboard creation, and target job titles like junior Splunk analyst or SOC analyst with Splunk exposure, which serve as realistic starting points before moving into dedicated engineering roles.
What does the splunk engineer interview process look like?
Most splunk engineer interviews include an initial recruiter screen, a technical phone or video interview covering SPL syntax and architecture concepts, and a practical component where you write or interpret a query or explain how you would design an index structure. Final rounds often involve a panel with a security or infrastructure team lead who will probe your experience with specific data sources, alert configurations, and troubleshooting approaches.
Where can I find and apply to splunk engineer jobs?
You can find and apply to splunk engineer jobs on Migrate Mate, which lists current openings from across the United States in one place. Search for roles that match your experience level and specialization, then apply directly to each listing that fits.
See All 50 Splunk Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find Splunk Engineer Jobs