Serve as the technical escalation point for complex investigations and major incidents requiring deep Splunk expertise
Evaluate and recommend new Splunk apps, premium solutions, or architectural changes
Own Splunk-related metrics and reporting for leadership (detection coverage, mean time to detect, platform performance, license/cost efficiency)
Lead threat hunting initiatives using advanced SPL, data models, and Splunk's pivot/statistical functions
Ensure Splunk configuration and processes support audit and compliance requirements (e.g., PCI-DSS, HIPAA, SOC 2, NIST)
Represent the SIEM/detection function in cross-functional security architecture and incident response planning
Qualifications
Required
Bachelor’s Degree required (experience and education equivalents are considered and can be substituted for a Bachelor’s Degree.
8 years of general work experience with 6 years relevant “functional” experience in security operations or detection engineering, with substantial hands-on Splunk ownership, including at least some experience in distributed/clustered environments
Advanced proficiency in SPL, including complex correlation searches, data models, and search optimization for large-scale environments
Deep working knowledge of Splunk architecture (indexer/search head clustering, forwarder management, index design) and Splunk Enterprise Security if deployed
Strong understanding of the MITRE ATT&CK framework, cyber kill chain, and threat modeling
Demonstrated experience designing detection strategies within Splunk, not just implementing individual searches
Strong scripting/automation skills (Python, PowerShell) and familiarity with SOAR platform integration (e.g., Splunk SOAR, if in use)
Experience with cloud security monitoring (AWS, Azure, or GCP log sources) and Splunk's cloud-specific add-ons
Track record of leading or significantly contributing to incident response investigations
Familiarity with compliance frameworks relevant to the organization's industry
Relevant certifications preferred: Splunk Core Certified Advanced Power User, Splunk Certified Architect, Splunk Enterprise Security Certified Admin, GCIA, GCIH, GCFA, or CISSP
Desired
Experience with Splunk in a VMware ESXi, vCenter virtual infrastructure
Experience or working knowledge with similar SIEM tools
Clearance
An active Top Secret clearance with SCI eligibility is required.
Location and Schedule
This position is onsite at the customer location in Washington, DC. The environment requires onsite support five days per week, with some flexibility in scheduling based on program and customer requirements. Core business hours are 8am-4pm.
About Quantum Sky
Compensation
Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $145,000-$155,000. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.
Benefits
Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave.
The world the mission operates in is going post-quantum, contested, and machine-speed. Quantum Sky engineers the advantage across cyber, networks, software, and quantum because the mission demands dominance, not parity. We don't follow the map. We draw it.
At Quantum Sky, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamQuantumSky?
Quantum Sky Engineering LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.
