Senior Splunk Security Engineer

Job Summary

Working remotely on a contract basis, the Senior Splunk Security Engineer will design, build, test, and document a privilege access event monitoring solution to enhance security alerting capabilities and improve privileged access visibility.

Key Responsibilities

• Design and implement privilege access event monitoring logic to identify security-relevant privileged access activity
• Develop intelligent alert routing and correlation logic to distinguish true security threats from routine operational events
• Create dashboards and reports to monitor alert health, performance, volume, and operational effectiveness

Required Qualifications

• Minimum of 5 years of experience in security operations, SIEM engineering, or a related cybersecurity function
• At least 3 years of hands-on Splunk experience in production environments
• Advanced proficiency in developing Splunk correlation searches, custom alert rules, dashboards, and reports
• Experience with SOAR platforms such as Cortex XSOAR or comparable orchestration platforms
• At least 2 years of experience with privilege access monitoring or identity and access management security