Pay Growth
?
out of 5
Not enough data
Not enough info to score pay or growth
Senior Splunk Engineer
Job
OREGON EMPLOYMENT DEPARTMENT
Portland, OR (In Person)
Full-Time
Review key factors to help you decide if the role fits your goals.
Job Security
?
out of 5
Not enough data
Calculating job security score...
Total Score
75
out of 100
Average of individual scores
Skill Insights
Compare your current skills to what this opportunity needs—we'll show you what you already have and what could strengthen your application.
Job Description
Job Listing ID:
4495554Job Title:
Senior Splunk EngineerApplication Deadline:
06/20/2026Job Location:
PortlandDate Posted:
05/20/2026Hours Worked Per Week:
40Shift:
Day ShiftDuration of Job:
Full Time, more than 6 months SR You may contact this employer directly. (Obtain the contact information to print or add to your jobs.) Obtain Contact Information Job Summary Everforth ECS is seeking a Senior Splunk Engineer to work in our Portland, OR office.Please Note:
This position is contingent upon contract award. The Senior Splunk Engineer designs, implements, maintains , and optimizes Splunk capabilities that support cybersecurity monitoring, investigation, reporting, and security operations. This role is responsible for Splunk platform engineering, data onboarding, search performance, dashboards, alerts, integrations, and technical support for SOC and cybersecurity stakeholders. The ideal candidate has deep hands-on experience administering Splunk Enterprise, Splunk Enterprise Security, or Splunk Cloud environments; understands security data pipelines and SIEM operations; and can independently troubleshoot complex platform, data ingestion, parsing, indexing, search, and content issues while collaborating with analysts, engineers, and program leadership. Key Responsibilities Splunk Platform Engineering & Administration- Administer, configure, maintain , and optimize Splunk Enterprise, Splunk Enterprise Security, Splunk Cloud, or distributed Splunk environments.
- Support indexers, search heads, deployment servers, heavy forwarders, universal forwarders, apps, add-ons, knowledge objects, and role-based access controls.
- Monitor platform health, availability, license utilization , data ingestion, storage, capacity, search concurrency, and overall performance.
- Plan and execute upgrades, patches, configuration changes, backup and recovery activities, and platform maintenance in accordance with change management processes. Data Onboarding & Integration
- Onboard, normalize, validate , and maintain security, infrastructure, cloud, endpoint, network, application, identity, and operational data sources.
- Configure and troubleshoot inputs, forwarders, sourcetypes , indexes, props.conf , transforms.conf , field extractions, lookups, event types, tags, and data routing.
- Map data to the Splunk Common Information Model and support data model acceleration, normalization, and content readiness for security analytics.
- Integrate Splunk with security tools, ticketing systems, SOAR platforms, vulnerability tools, EDR solutions, firewalls, IDS/IPS, cloud platforms, and identity systems. Security Analytics & Detection Support
- Develop, maintain , and tune SPL searches, correlation searches, alerts, dashboards, reports, notable event rules, and security monitoring use cases.
- Partner with SOC analysts, threat hunters, threat intelligence analysts, and security engineers to translate detection requirements into reliable Splunk content.
- Tune detections and searches to im To view the full job description please use the link below.