Splunk Cybersecurity Engineer

• Lead Splunk monitoring, log onboarding, and security analytics activities for the divestiture program.

• Configure and validate log ingestion, dashboards, alerts, correlation rules, and reporting.

• Support Splunk monitoring separation and transition for in-scope systems and entities.

• Troubleshoot data ingestion, indexing, alerting, and performance issues.

• Collaborate with infrastructure, network, IAM, application, and security teams.

• Develop operational documentation, monitor reports, and audit evidence

Deliverables:

• Splunk Monitoring & Detection Framework - Configured dashboards, alerts, and correlation rules.

• Log Onboarding & Validation Reports - Verified data ingestion and monitoring coverage.

• Monitoring Gap & Remediation Tracker - Identified issues and resolution status.

• Splunk Operational Documentation - Runbooks, configurations, and support procedures.

• Security Monitoring & Audit Readiness Reports - Control assurance, coverage, and compliance evidence.

• Divestiture Monitoring Transition Package - Validated monitoring capabilities supporting secure separation

• Hands-on experience with Splunk Enterprise and Splunk Enterprise Security.

• 5-8 years of experience

• Expertise in log onboarding, parsing, normalization, dashboards, alerts, and correlation rules.

• Strong knowledge of SIEM operations, threat detection, and security monitoring.

• Experience with application, infrastructure, network, IAM, endpoint, and cloud security logs.

• Proficiency in SPL and scripting (Python, PowerShell, APIs) for automation.

• Experience supporting logging and monitoring separation activities in large enterprise environments.

• Strong troubleshooting, analytical, documentation, and communication skills

• Effective written and verbal communication skills

• Effective analytic/diagnostic skills

• Bachelor’s degree/University degree or equivalent experience