Splunk UBA Engineer

Description Splunk UBA Engineer

Location: Suitland, MD Security Clearance: Active TS/SCI Required

Leidos is hiring a Splunk UBA Engineer to join our team in Suitland, MD. In this role, you will provide engineering, operations, and technical support for Security Information and Event Management (SIEM) platforms that enable threat detection, compliance, and security incident management for the Office of Naval Intelligence's Hopper Global Communications Center (HGCC). You will help optimize user behavior analytics, strengthen threat detection capabilities, and support mission critical defensive cyber operations.

• Administer the SOAR platform, including configuration, asset integrations, and custom fields.
• Administer the User Behavior Analytics (UBA) platform, including configuration, data source ingestion, and validation.
• Configure behavioral baselines, peer group analysis, user, device, and entity modeling, and risk scoring thresholds.
• Monitor UBA pipeline health, model accuracy, and analytic coverage.
• Tune anomaly detection logic to reduce false positives and improve threat detection accuracy.
• Validate UBA insights against known security incidents and integrate findings into Splunk Enterprise Security.
• Support UBA platform upgrades and analytic refresh cycles.
• Support Risk Management Framework (RMF) and Assessment & Authorization (A&A) activities.
• Recommend architectural and security improvements.
• Travel may be required between the National Maritime Intelligence Center (NMIC) and other designated CONUS and OCONUS locations in support of program requirements.

• Bachelor's degree in Computer Science, Information Technology, Information Assurance, or a related discipline with 8+ years of relevant experience, or a Master's degree with 6+ years of relevant experience. 15+ years of experience, including at least 10 years supporting LAN/WAN technologies, may be considered in lieu of a degree.
• Active TS/SCI security clearance.
• Active IAT Level III certification (such as CISSP).
• 8+ years of engineering experience supporting Computer Network Defense (CND).
• 6+ years of experience with Splunk, including Splunk Add-ons, Apps, Technology Add-ons (TAs), and Universal Forwarder.
• Expert knowledge of Splunk and its components, including Splunk Enterprise, Splunk Enterprise Security, and Splunk User Behavior Analytics (UBA).
• Significant experience with the System/Software Development Life Cycle (SDLC).
• Strong analytical and problem solving skills.
• Effective verbal and written communication skills.

NITESONI

DABAOPP1

For U.S. Positions:
While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range $ - $

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at

Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money),…