Splunk Engineer / SIEM Engineer

• SIEM Administration: Engineer, configure, tune, and optimize the enterprise SIEM platform (Splunk Enterprise / Enterprise Security).
• Data Onboarding: Onboard, parse, normalize, and index security log sources using syslog, APIs, agents, and cloud integrations.
• Content Creation: Build and manage correlation searches, SPL queries, alerts, dashboards, and threat detection rules.
• Incident Support: Collaborate with SOC analysts to resolve complex data ingestion issues and streamline threat investigation capabilities.

• 3+ years of professional IT experience in SIEM, Security Engineering, or Cybersecurity Operations.
• 3+ years administering or engineering Splunk Enterprise or Splunk Enterprise Security.
• 3+ years onboarding and integrating security log sources via Syslog, APIs, or Agents.

Preferred Qualifications:

• Splunk Enterprise Certified Admin certification.
• Expertise in developing SPL searches, correlation rules, dashboards, and reports.
• Hands-on experience troubleshooting data ingestion, logging, or integration issues.
• Familiarity with cybersecurity frameworks such as NIST and MITRE ATT&CK.
• Prior experience in large enterprise or public sector environments.