> Markdown version of [/jobs/ext/2594301-splunk-security-engineer](https://www.wearedevelopers.com/jobs/ext/2594301-splunk-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Splunk Security Engineer - **Company:** HonorVet Technologies - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Temporary to permanent - **Skills:** Cyber Security, System Configuration, Identity and Access Management, Issue Tracking Systems, Performance Tuning, Security Information and Event Management, Systems Integration, Indexer, Kubernetes, Cortex XSOAR Platform, Splunk, Data Pipelines - **Published:** August 15, 2026 - **Apply:** https://www.dice.com/job-detail/866c47fb-3b6f-416c-9383-7b644b3e1b6b ## About the Role * The requested resource must have the following skills and experience: * Minimum of 5 years of experience in security operations, SIEM engineering, security engineering, or a related cybersecurity function. * At least 3 years of hands-on Splunk experience in production environments. * Advanced proficiency developing Splunk correlation searches, custom alert rules, dashboards, and reports. * Experience configuring and implementing Splunk Risk-Based Alerting for security use cases. * Strong understanding of Splunk data pipelines, search performance optimization, indexing, field extraction, and alert tuning. * At least 2 years of hands-on experience with SOAR platforms such as Cortex XSOAR, Demisto, or comparable orchestration platforms. * Experience designing and implementing complex SOAR playbooks, workflows, automation logic, and incident handling processes. * Experience integrating SOAR platforms with SIEM tools, ticketing systems, and other security operations technologies. * At least 2 years of experience with privilege access monitoring, identity and access management security, privileged access management, or related security operations use cases. * Understanding of privilege escalation detection methodologies, authorization frameworks, access control models, and IAM-related security monitoring. * Proven experience reducing false positives and improving alert fidelity in high-volume security. ## Description Must haves: 4-5 years Splunk experience, 4-5 years IAM experience, monitoring-preferred (previous analyst work)-PLEASE SHOW ON RESUME You will serve as a Senior Splunk Security Engineer responsible for designing, building, testing, and documenting a privilege access event monitoring solution within the organization's security operations environment. This resource will support the enhancement of security alerting capabilities by improving privileged access visibility, reducing false positives, and implementing intelligent alert routing and automation using SIEM and SOAR technologies. The resource will work closely with the security operations and engineering teams to implement advanced Splunk correlation searches, risk-based alerting logic, SOAR playbooks, alert enrichment workflows, and operational dashboards. The engagement will focus on delivering a production-ready monitoring capability that enables more accurate detection, prioritization, and handling of privileged access-related events., The contingent worker will be responsible for the following activities: * Design and implement privilege access event monitoring logic to identify security-relevant privileged access activity. * Develop intelligent alert routing and correlation logic to distinguish true security threats from routine operational events. * Build and optimize Splunk correlation searches, custom alert rules, and risk-based alerting logic. * Configure filtering, suppression, and enrichment rules to reduce alert noise and improve alert quality. * Design and develop SOAR workflows and playbooks to automate incident handling and alert consolidation. * Integrate SIEM, SOAR, and ticketing processes to support consistent incident routing and management. * Create enrichment logic that adds relevant context to alerts, including user, asset, access, and threat-level information. * Build dashboards and reports to monitor alert health, performance, volume, and operational effectiveness. * Test the implementation against historical datasets of at least 60 days to validate alert accuracy and volume reduction. * Document all implemented searches, workflows, logic, playbooks, dashboards, edge cases, and operating procedures. * Create runbooks and operational guides for ongoing support and maintenance. * Provide knowledge transfer and training to security operations and engineering teams prior to engagement completion. ## Related Videos - [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way) - [Optimizing Discovery: PostgreSQL's Role in Transforming GetYourGuide's Search](https://www.wearedevelopers.com/videos/1647-optimizing-discovery-postgresql-s-role-in-transforming-getyourguide-s-search) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Instant KAI Sandboxes with vCluster: Multi-Tenant, Multi-Scheduler GPU Sharing](https://www.wearedevelopers.com/videos/100333-instant-kai-sandboxes-with-vcluster-multi-tenant-multi-scheduler-gpu-sharing) - [Dynamic Entities in .NET: Building Low-Code Systems on Top of Entity Framework Core](https://www.wearedevelopers.com/videos/100218-dynamic-entities-in-net-building-low-code-systems-on-top-of-entity-framework-core) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)