Title: Senior Cybersecurity Splunk Engineer
Location: Irving, TX or Jacksonville, FL/Onsite
Video Interviews
Experience required: 8 - 12 years of experience
JOB DESCRIPTION:
Must Have Technical/Functional Skills
- Hands-on experience with Splunk Enterprise and Splunk Enterprise Security.
- Expertise in log onboarding, parsing, normalization, dashboards, alerts, and correlation rules.
- Strong knowledge of SIEM operations, threat detection, and security monitoring.
- Experience with application, infrastructure, network, IAM, endpoint, and cloud security logs.
- Proficiency in SPL and scripting (Python, PowerShell, APIs) for automation.
- Experience supporting logging and monitoring separation activities in large enterprise environments.
- Strong troubleshooting, analytical, documentation, and communication skills
- Effective written and verbal communication skills
- Effective analytic/diagnostic skills
- Bachelor’s degree/University degree or equivalent experience
Roles & Responsibilities
Services:
- Lead Splunk monitoring, log onboarding, and security analytics activities for the divestiture program.
- Configure and validate log ingestion, dashboards, alerts, correlation rules, and reporting.
- Support Splunk monitoring separation and transition for in-scope systems and entities.
- Troubleshoot data ingestion, indexing, alerting, and performance issues.
- Collaborate with infrastructure, network, IAM, application, and security teams.
- Develop operational documentation, monitor reports, and audit evidence
Deliverables:
- Splunk Monitoring & Detection Framework – Configured dashboards, alerts, and correlation rules.
- Log Onboarding & Validation Reports – Verified data ingestion and monitoring coverage.
- Monitoring Gap & Remediation Tracker – Identified issues and resolution status.
- Splunk Operational Documentation – Runbooks, configurations, and support procedures.
- Security Monitoring & Audit Readiness Reports – Control assurance, coverage, and compliance evidence.
- Divestiture Monitoring Transition Package – Validated monitoring capabilities supporting secure separation
