Splunk Data Models

Splunk Data Models Cybersecurity Jobs

2 jobs found

14d ago

Security Engineer III, Splunk Architect

Deloitte Rosslyn, VA

Rosslyn, VA

14d ago

$103k - $189k/yr Full time Analytics Cloud Platforms Cybersecurity Tools

Apply Now

Job Description

Deloitte is seeking a Splunk Architect to design and optimize Splunk-based security monitoring and enterprise logging capabilities for the Cyber team.

Responsibilities

Design, implement, and optimize Splunk architectures for security monitoring, log management, and operational analytics
Develop and maintain Splunk dashboards, alerts, reports, searches, and data models based on client and business requirements
Integrate data sources into Splunk, including infrastructure, cloud, applications, and security technologies
Support use case development across threat detection, incident response, compliance monitoring, and operational visibility
Create and maintain architecture diagrams, technical documentation, implementation standards, and administration procedures

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field
Active Top-Secret Clearance
Ability to work onsite up to 5 days per week (Rosslyn, VA)
2+ years experience in one or more of the following:
- Implementing and supporting Splunk Enterprise or Splunk Cloud
- Developing Splunk dashboards, reports, alerts, and saved searches
- Onboarding and normalizing log sources from infrastructure, applications, cloud platforms, or security tools
- SIEM concepts, security monitoring, or threat detection use cases
- Working knowledge of TCP/IP, networking protocols, and system log analysis
- Experience with Splunk Search Processing Language (SPL), data models, and role-based access controls
One or more certifications: Splunk Core Certified Power User, Splunk Enterprise Certified Admin, or Splunk Enterprise Security
Ability to travel 20% on average based on work, clients, and industries/sectors served
Legally authorized to work in the United States without employer sponsorship, now or in the future

Technologies

Splunk Enterprise, Splunk Cloud
Splunk Search Processing Language (SPL)
SIEM
Splunk dashboards, Splunk alerts, Splunk reports, saved searches
Splunk data models
Role-based access controls
Splunk SOAR
Python
AWS, Microsoft Azure, Google Cloud Platform (GCP)
Transmission Control Protocol/Internet Protocol (TCP/IP)
Infrastructure as code

Preferred

1+ year experience supporting Splunk in AWS, Microsoft Azure, or GCP
5+ years experience with Splunk Enterprise Security, Splunk SOAR, or security orchestration workflows
5+ years experience integrating Splunk with endpoint, identity, firewall, or cloud security tools
1+ year experience with Python, automation scripting, or infrastructure as code tools
Experience supporting regulated or federal environments

Compensation

$102,500 - $188,900 per year (estimated wage range)

Incentive Program

Eligible for a discretionary annual incentive program, subject to program rules
Any award depends on factors including individual and organizational performance

View full job page →

1mo ago

Security Engineer III, Splunk Architect

Deloitte Baltimore, MD

Baltimore, MD

1mo ago Closed

$103k - $189k/yr Full time Engineer Identity and Access Management Incident Response

This position is no longer accepting applications (closed Sep 5, 2026).

Job Description

Join Deloitte’s Cyber team to architect and engineer Splunk capabilities for security monitoring, enterprise logging, and operational analytics.

Responsibilities

Design, implement, and optimize Splunk architectures for security monitoring, log management, and operational analytics
Build and maintain Splunk dashboards, alerts, reports, searches, and data models aligned to client and business requirements
Integrate log and telemetry sources into Splunk, including infrastructure, cloud, application, and security technologies
Support development of threat detection, incident response, compliance monitoring, and operational visibility use cases
Create and maintain architecture diagrams, technical documentation, implementation standards, and administration procedures

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related technical field
Active Top-Secret Clearance
Ability to work onsite up to 5 days a week
Implementing and supporting Splunk Enterprise or Splunk Cloud
Develop Splunk dashboards, reports, alerts, and saved searches
Onboard and normalize log sources from infrastructure, applications, cloud platforms, or security tools
SIEM concepts with security monitoring or threat detection use case experience
Working knowledge of TCP/IP, networking protocols, and system log analysis
Experience with Splunk Search Processing Language (SPL), Splunk data models, and role-based access controls
One or more certifications: Splunk Core Certified Power User, Splunk Enterprise Certified Admin, or Splunk Enterprise Security
Ability to travel 20% on average based on client needs and sectors
Legally authorized to work in the United States without employer sponsorship, now or in the future

Preferred

1+ year supporting Splunk in AWS, Microsoft Azure, or GCP
5+ years of Splunk Enterprise Security, Splunk SOAR, or security orchestration workflow experience
5+ years integrating Splunk with endpoint, identity, firewall, or cloud security tools
1+ year experience with Python, automation scripting, or infrastructure as code tools
Experience supporting regulated or federal environments

Successful Candidate Skills

Ability to work independently and collaborate in a team
Effective written and verbal communication skills
Meticulous attention to detail and quality of work product
Ability to build and sustain professional relationships
Ability to lead projects or workstreams
Ability to manage and prioritize multiple tasks in a fast-paced environment
Strong interpersonal skills and professional demeanor
Ability to meet deadlines
Ability to provide clear guidance to others

Technologies

Splunk Enterprise
Splunk Cloud
Splunk Search Processing Language (SPL)
TCP/IP
SIEM
Splunk dashboards, Splunk alerts, Splunk reports, saved searches
Splunk data models
Role-based access controls

Location and Salary

Baltimore, MD (onsite)
USD 102,500 - 188,900 per year

Team and Offering

Deloitte’s Deloitte Cyber team focuses on the unique challenges and opportunities businesses face in cybersecurity
Cyber defense and resilience offering supports managing and protecting dynamic attack surfaces, enabling rapid crisis and cyber incident response for readiness, response, and recovery

Role Context

Security Engineer III (Splunk Architect) role on Deloitte’s Cyber team
Designs, implements, and optimizes Splunk solutions for security monitoring, visibility, and enterprise logging strategies
Combines hands-on Splunk engineering with architecture responsibilities to support threat detection and operational resilience

View full job page →

Splunk Data Models Cybersecurity Jobs

Security Engineer III, Splunk Architect

Security Engineer III, Splunk Architect

Get Splunk Data Models Cybersecurity Jobs alerts