Splunk Detection Engineer

Splunk Detection Engineer
Hybrid Herndon, VA

Blu Omega is seeking a Splunk Detection Engineer to support federal transportation cybersecurity. This role is responsible for developing and maintaining actionable detection content within a security operations environment.

Program Overview

This program supports federal transportation security through cybersecurity operations and network defense.

Key Details

• Location: Hybrid Herndon, VA
• Clearance / Suitability: Fully adjudicated Secret clearance required

Responsibilities

• Develop, modify, test, and maintain Splunk detection content, including correlation searches, notable events, risk-based alerts, dashboards, reports, and investigative queries.
• Create actionable alerts with appropriate severity, context, investigation steps, and response guidance for SOC analysts.
• Translate threat intelligence, MITRE ATT&CK techniques, incident findings, and analyst feedback into detection logic.
• Tune detections to reduce false positives while preserving meaningful threat coverage.
• Validate detection content using historical data, attack simulations, and known benign activity.
• Develop and maintain automation workflows, playbooks, and adaptive response actions.
• Apply Splunk CIM, data models, field extractions, tags, and event types to support reliable detections.
• Collaborate with SOC, incident response, infrastructure, and threat intelligence teams across IT, IoT, and OT environments.
• Document detection logic, data sources, dependencies, tuning decisions, and analyst response procedures.

Required Qualifications

• Hands-on experience developing and managing production Splunk detection content in a SOC environment.
• Strong proficiency with Splunk SPL.
• Experience creating and maintaining Splunk Enterprise Security correlation searches, notable events, or risk-based alerts.
• Experience designing actionable detections and tuning alerts to reduce false positives.
• Experience creating scheduled and ad hoc searches, dashboards, reports, and investigative queries.
• Experience with intrusion detection and incident response in a SOC environment.
• Knowledge of Splunk CIM, data models, event types, tags, field extractions, and severity criteria.
• Experience with Windows and Linux security telemetry and event collection.
• Ability to test, troubleshoot, document, and maintain detection content throughout its lifecycle.
• Strong written and verbal communication skills.

Preferred Qualifications

• CISSP, GCIH, GCFA, GPEN, GWAPT, GCIA, or equivalent certification.

Compensation

Salary Range: $110,000.00 - $130,000.00

Final compensation is based on technical skills, experience, education, certifications, and clearance.

Blu Omega Benefits & Perks

• Medical, Dental, and Vision coverage through national providers
• 401(k) with company match (eligible after 6 months; vesting applies)
• Company-paid Life and AD&D insurance with additional voluntary options
• Short-term disability (company-paid) and long-term disability options
• Employee Assistance Program (EAP) with 24/7 confidential support and mental health resources
• Telehealth and virtual care options available through medical plans
• Pet insurance, legal services, and identity theft protection options
• Paid Time Off (PTO) for eligible employees
• Paid federal holidays for salaried employees
• Access to wellness programs, discounts, and lifestyle benefits

Benefits eligibility and offerings may vary based on role, employment status, and program requirements.

Company Overview

Blu Omega is a Woman-Owned Small Business (WOSB) delivering technology and cybersecurity solutions to federal agencies and enterprise clients nationwide. Headquartered in Ashburn, VA, we support mission-critical programs across civilian and defense sectors, including health, national security, and regulatory environments. We partner with government agencies and large integrators to provide expertise in cybersecurity operations, cloud and infrastructure modernization, data and analytics, and enterprise IT support.

Equal Opportunity Employer

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, or disability.

#CJ
#LI-Hybrid