> Markdown version of [/jobs/ext/4583373-splunk-engineer-hybrid-onsite](https://www.wearedevelopers.com/jobs/ext/4583373-splunk-engineer-hybrid-onsite). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Splunk Engineer(Hybrid Onsite)

- **Company:** Gsk Solutions Inc
- **Location:** Dallas, TX, United States
- **Experience:** Expert
- **Contract:** Contract
- **Skills:** Microsoft Windows, Active Directory, Amazon Web Services, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Computing Security, Cyber Security, Continuous Integration, Data Retention, Linux, Monitoring of Systems, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), Network Security, Parsing, Performance Tuning, Security Information and Event Management, Systems Integration, Google Cloud, Enterprise Software Applications, Data Ingestion, System Availability, Mitre Att&ck, Cyber Threat Analysis, Indexer, Firewalls (Computer Science), Deployment Automation, Cybercrime, Data Management, Splunk
- **Published:** November 5, 2026
- **Apply:** https://www.dice.com/job-detail/835c60b9-66b4-47b3-93eb-c2a5098c65e5

## About the Role

* Strong hands-on experience with Splunk Enterprise and Splunk Enterprise Security (ES).
 * Expertise in SPL query development and troubleshooting.
 * Experience onboarding and managing enterprise log sources.
 * Knowledge of threat detection, threat hunting, and detection engineering.
 * Experience tuning SIEM alerts and reducing false positives.
 * Strong understanding of Windows, Linux, networking, cloud security, and security operations.
 * Familiarity with MITRE ATT&CK, threat intelligence, and incident response processes.
 * Preferred Certifications: Splunk Enterprise Certified Admin/Architect, SC-200, CISSP, GCIH, GCIA.

## Description

Splunk Security Engineer with 7-8 years of experience in SIEM engineering, security monitoring, and threat detection.

Deliverables

 * Administration, configuration, maintenance, and technical support of the Splunk Enterprise and Splunk Enterprise Security platforms.
 * Successful onboarding and integration of assigned enterprise applications, systems, infrastructure, and log/data sources into Splunk.
 * Configuration and optimization of log ingestion, parsing, normalization, indexing, retention, search performance, and data-management processes.
 * Development, enhancement, and maintenance of Splunk searches, alerts, dashboards, reports, data models, applications, add-ons, and security/compliance content.
 * Development and maintenance of custom Splunk solutions and automation using SPL, Python, Bash, SimpleXML and other applicable technologies.
 * Technical recommendations and implementation support related to Splunk architecture, infrastructure standards, capacity, performance, scalability, high availability, upgrades, platform refreshes, and lifecycle management.
 * Support for Splunk integrations with business-critical enterprise applications, cloud platforms, security technologies, and observability systems.
 * Technical support for platform migrations, upgrades, deployment automation, CI/CD processes, and infrastructure modernization activities as assigned.
 * Troubleshooting, root-cause analysis, and resolution recommendations for Splunk platform, ingestion, integration, performance, and production-support issues.
 * Technical documentation covering configurations, architecture, integrations, deployment procedures, operational processes, troubleshooting procedures, and implemented solutions.
 * Knowledge transfer, technical guidance, and mentoring to client and project team members regarding Splunk administration, engineering, architecture, and operational best practices.
 * Integrate and onboard diverse log sources into Splunk, including Windows, Linux, Active Directory, Cloud (AWS/Azure/Google Cloud Platform), Firewalls, EDR, IAM, and network security tools.
 * Troubleshoot log ingestion, parsing, indexing, CIM mapping, and data quality issues.
 * Develop and optimize SPL queries, dashboards, reports, and correlation searches.
 * Design, tune, and maintain detection rules/use cases to improve detection coverage and reduce false positives.
 * Perform proactive threat hunting using Splunk and security telemetry.
 * Conduct threat modeling exercises using frameworks such as MITRE ATT&CK and Cyber Kill Chain.
 * Integrate and leverage threat intelligence feeds to enhance detection capabilities.
 * Support incident investigations and collaborate with SOC and Incident Response teams.
 * Optimize Splunk performance, data retention, and search efficiency.