Job Requirements
San Antonio, TX
Top Secret/SCI Polygraph not specified
Early Career (2+ yrs experience)
Salary not specified
Join Premium to unlock estimated salaries 
Job Description
Position: Mid-Level Splunk Engineer
Location: Joint Base San Antonio (JBSA), TX — 100% On-Site
Security Clearance: Active TS/SCI
Position Overview:
We are seeking an active TS/SCI cleared Mid-Level Splunk Engineer to join our team supporting the 16th Air Force at Joint Base San Antonio. In this role, you will deliver day-to-day engineering services centered on dashboard creation, data troubleshooting, alert tuning, and security detection support within Splunk Enterprise Security (ES). This on-site engagement is ideal for a candidate with 2+ years of Splunk experience looking to apply their skills in a high-impact military cyber environment.
Key Responsibilities & Scope of Work
Dashboarding & Visualizations: Create, troubleshoot, and optimize Splunk dashboards, data panels, and custom alerts to support operational situational awareness.
Detection Support: Assist in building, testing, and refining cybersecurity detection rules within Splunk Enterprise Security (ES).
Data Onboarding & Troubleshooting: Diagnose and resolve data ingestion issues, query errors, and dashboard performance bottlenecks.
Automation Engineering: Support the creation and maintenance of automated response actions and alert workflows.
Status Reporting: Maintain accurate task tracking and submit weekly status reports summarizing work accomplishments and blocking items.
Qualifications & Requirements
Clearance: Active TS/SCI
Experience: 2+ years of hands-on experience working in Splunk engineering or administration roles.
Technical Skills:
Strong proficiency with Splunk Core searching, dashboard development, and basic administration.
Hands-on experience working with Splunk Enterprise Security (ES) and standard SIEM workflows.
Solid understanding of log onboarding, field extractions, and SPL query construction.
Preferred / Nice-to-Have
Working knowledge or exposure to Splunk SOAR (Phantom) or Splunk ITSI.
Splunk Core Certified Power User or Admin certification.
Location: Joint Base San Antonio (JBSA), TX — 100% On-Site
Security Clearance: Active TS/SCI
Position Overview:
We are seeking an active TS/SCI cleared Mid-Level Splunk Engineer to join our team supporting the 16th Air Force at Joint Base San Antonio. In this role, you will deliver day-to-day engineering services centered on dashboard creation, data troubleshooting, alert tuning, and security detection support within Splunk Enterprise Security (ES). This on-site engagement is ideal for a candidate with 2+ years of Splunk experience looking to apply their skills in a high-impact military cyber environment.
Key Responsibilities & Scope of Work
Dashboarding & Visualizations: Create, troubleshoot, and optimize Splunk dashboards, data panels, and custom alerts to support operational situational awareness.
Detection Support: Assist in building, testing, and refining cybersecurity detection rules within Splunk Enterprise Security (ES).
Data Onboarding & Troubleshooting: Diagnose and resolve data ingestion issues, query errors, and dashboard performance bottlenecks.
Automation Engineering: Support the creation and maintenance of automated response actions and alert workflows.
Status Reporting: Maintain accurate task tracking and submit weekly status reports summarizing work accomplishments and blocking items.
Qualifications & Requirements
Clearance: Active TS/SCI
Experience: 2+ years of hands-on experience working in Splunk engineering or administration roles.
Technical Skills:
Strong proficiency with Splunk Core searching, dashboard development, and basic administration.
Hands-on experience working with Splunk Enterprise Security (ES) and standard SIEM workflows.
Solid understanding of log onboarding, field extractions, and SPL query construction.
Preferred / Nice-to-Have
Working knowledge or exposure to Splunk SOAR (Phantom) or Splunk ITSI.
Splunk Core Certified Power User or Admin certification.
group id: 10529568