Description

You will design, implement, and manage enterprise Splunk SIEM solutions for centralized log analysis, real-time monitoring, and security automation.

This role is hybrid.

Responsibilities

• Develop and fine-tune correlation rules, alerts, dashboards, and use cases to detect malicious activity.
• Lead data ingestion and normalization from cloud workloads, endpoints, and network devices.
• Build and maintain SOAR playbooks to automate incident detection, triage, response, and recovery.
• Apply machine learning models to identify security anomalies and enrich event context.
• Mentor junior engineers and maintain documentation for playbooks and automation processes.

Required Skills

• 6+ years of experience in cybersecurity engineering, specifically with Splunk SIEM and SOAR.
• 3+ years of experience in security automation using platforms like Splunk SOAR, XSOR, or Swimlane.
• 3+ years in cyber data engineering, including log processing and telemetry pipelines.
• Proficiency in Python and PowerShell scripting.
• Experience using REST APIs for security tool integrations.
• Proven ability to design and deploy automation workflows in enterprise environments.
• Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent experience.

Preferred Skills

• Hands-on experience with AWS, Azure, or Google Cloud Platform.
• Familiarity with cloud-native security tooling and serverless security design patterns.
• Experience working in Agile environments and cross-functional DevSecOps teams.

Key Skills

Education

Bachelor's degree