Splunk Engineer

Design, develop, and maintain advanced Splunk dashboards, alerts, and reports to support SOC operations.

Write and optimize complex SPL queries for data analysis, threat detection, and performance monitoring.

Integrate diverse log sources and ensure data normalization for effective correlation and visibility.

Partner closely with SOC analysts to enhance detection capabilities and incident response efforts.

Troubleshoot and optimize Splunk infrastructure for scalability, performance, and reliability.

Support security investigations through log analysis, correlation searches, and forensic data review.

Implement Splunk best practices for data onboarding, indexing strategies, and retention policies.

Active Secret Clearance required.

6+ years of hands-on experience working with Splunk in enterprise environments.

Deep expertise in SPL (Search Processing Language) and Splunk dashboard development.

Strong experience supporting SOC operations and working alongside security analysts.

Experience with log aggregation, SIEM tools, and security monitoring frameworks.

Knowledge of scripting or automation (Python, Bash, or similar) is preferred.

Ability to work onsite 5 days per week in Durham, NC.

Salary range: $150,000 - $170,000 depending on experince

Comprehensive benefits package including medical, dental, vision, 401(k), and PTO

Opportunity to work on high-impact cybersecurity initiatives within a secure environment