Senior Splunk Detection Engineer

To support the National Science Foundation's Cybersecurity & Privacy Program, the full-time Senior Splunk Detection Engineer will enhance Security Operations Center effectiveness through high-fidelity detections, Risk-Based Alerting, and incident response collaboration while working remotely. Key responsibilities Design, build, and continuously improve Splunk Enterprise Security detection content and correlation searches Implement Risk-Based Alerting strategies and improve detection quality to reduce false positives Collaborate with Incident Response and other teams to convert real-world incidents into enhanced detection capabilities Required qualifications Active Public Trust clearance or the ability to obtain one Minimum seven years of cybersecurity experience, including four years in Detection Engineering or related fields Experience with Splunk Enterprise Security and building/tuning correlation searches Hands-on implementation experience with Risk-Based Alerting and practical Incident Response experience Strong knowledge of AWS security services such as GuardDuty and CloudTrail