Splunk Security Engineer

Job Summary

Working remotely in a full-time capacity, the Splunk Security Engineer will manage the architecture, deployment, configuration, and maintenance of Splunk instances for clients, while also developing security use cases and alert configurations.

Key responsibilities

• Architect, administer, and maintain Splunk instances for clients and internal use
• Evaluate client applications and prioritize critical data sources based on security value
• Provide guidance on log collection methods and assist clients with forwarding security logs to the SIEM platform

Required qualifications

• Hands-on experience managing, configuring, and deploying Splunk in a professional environment
• Strong knowledge of information security best practices and current threat detection methods
• Solid foundation in IT and familiarity with Windows system administration and networking technologies
• Experience with Query Languages, preferably KQL
• Proficient in PowerShell and other scripting languages