- Provide hands-on engineering support for the enterprise SIEM environment, focusing on Splunk platform design, configuration, maintenance, and optimization.
- Onboard and integrate security log sources, ensuring proper log collection, parsing, normalization, indexing, and retention.
- Develop and maintain SPL searches, correlation rules, alerts, dashboards, and reports to strengthen threat detection and security monitoring.
- Troubleshoot SIEM performance and data ingestion issues while supporting SOC analysts, incident response, upgrades, and system integrations.
- Require 3+ years of SIEM/Splunk security experience; Splunk Enterprise Certified Admin, enterprise/government experience, and knowledge of NIST and MITRE ATT&CK are highly desired.
Rate:
Not specified
Location:
Remote
IR35 Status:
Outside
Remote Status:
Remote
Industry:
Cybersecurity
Seniority Level:
Mid-Level