Splunk Service Engineer (Integration and Ingestion)

Job Locations US-NC-Morrisville
Job ID
# of Openings
Information Technology
Work Authorization
US Citizens, preferred


VariQ has an exciting opportunity for a highly qualified Splunk Service Engineer (Integration and Ingestion) to support the USPS CISO project with DXC in Morrisville, NC.


Additional Information:

  • Salary: Dependent upon experience
  • Security Clearance: none
  • Available: ASAP


Provides consulting, training, and hands-on-keyboard services for Splunk data integration, content development, and user enablement for the CISO organization.


Required Skills:

  • Tuning and configuration of Splunk App for Enterprise Security (ES)
  • Work with CISO Operations and Engineering to gather requirements for building content and use cases in Splunk.
  • Assist in development of advanced security use cases in Splunk
  • Handle User Enablement to include assist and/or train CISO Splunk team on data lifecycle support, assist and/or train CISO team and analysts on Content Development, develop and implement automation and efficiencies with Splunk and CISO workflows, provide analyst training and workshops on using Splunk, and introduce new content, alerts and data sources to CISO Analysts.
  • Develop Data Lifecycles
  • Data Discovery with Application Owners/End Users to determine data source structure and onboarding design.
  • Data Parsing (Dev) at Index Time (Host, Source, Sourcetype, Line breaks, Timestamps)
  • Data Normalization (Dev) including CIM compliance. Preparing data to be ready for search, data models and content development
  • Data Validation (Dev) work with Application owner and end user to validate data normalization
  • Data Onboarding (Prod) work with Splunk Admins to onboard Data from Dev to Prod



  • Certified Splunk Architect
  • CISSP, Security+, or other relation information security certification required


Additional Provisions: 
• Pass both a client mandated clearance process to include drug screening, criminal history check and credit check. 
• Once candidate’s resume is approved and interview passed, the agency is responsible for providing drug screening. Failure to submit the drug screening results will delay the security clearance process. 
• If a candidate is given an interim clearance, continuation of employment is then based on the candidate receiving a sensitive clearance. 
• All candidates must be a US Citizen, or have a permanent residence status (Green Card). 
• Candidate must have lived in the United States for the past five years. 
• Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members.) 



VariQ is an equal opportunity employer.


Sorry the Share function is not working properly at this moment. Please refresh the page and try again later.
Share on your newsfeed