Contract Splunk Security Engineer — SOAR & Data Onboarding

MWResource, Inc.; Austin (TX); Hybrid; USD 124,000 - 165,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Disability coverage (short/long-term)

Employer paid life insurance

MWResource 401K plan for US-based cons

Job summary

MWResource, Inc. is seeking a contract Splunk Security Engineer to manage Splunk Enterprise and Splunk SOAR environments in a hybrid Austin setting.

The role covers day-to-day administration, engineering, and operational support to ensure data onboarding, health, and performance across systems. You will build and maintain playbooks, integrate with security tools, and support automation and workflows while troubleshooting ingestion and upgrade tasks.

Qualifications

• 3+ years administering Splunk Enterprise (indexers, search heads, forwarders, data onboarding).
• Direct experience building Splunk SOAR playbooks.
• Direct experience integrating Splunk/SOAR with endpoint, vulnerability, or other security tool.
• Experience with REST API-based integrations.
• Strong SPL skills, including correlation searches, dashboards, and health monitoring.

Responsibilities

• Manage and maintain the Splunk Enterprise environment, including data onboarding, index and source type management, search head and indexer health, and performance tuning.
• Build and maintain Splunk SOAR playbooks; manage app/connector integrations; automate playbooks across the security stack.
• Troubleshoot data ingestion issues; support upgrades/patching; align use cases with detection/response priorities and service delivery workflows.
• Document architecture, playbooks, and standard operating procedures for knowledge transfer.

Skills

Splunk Enterprise

SOAR playbooks

REST API integrations

SPL searches & dashboards

Security tool integrations

Education

Bachelor’s Degree in Cyber Security

Bachelor’s Degree in Computer Science

Tools

Python

PowerShell

Splunk SOAR

Job description

MWResource, Inc. is seeking a contract Splunk Security Engineer to manage Splunk Enterprise and Splunk SOAR environments in a hybrid Austin setting.

The role covers day-to-day administration, engineering, and operational support to ensure data onboarding, health, and performance across systems. You will build and maintain playbooks, integrate with security tools, and support automation and workflows while troubleshooting ingestion and upgrade tasks.