Hybrid Splunk Security Engineer — SOAR & Data Onboarding Pro

MWResource; Austin (TX); Hybrid; USD 124,000 - 165,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Disability insurance

Life insurance

401K plan

Background check

Drug screening

US work authorization

Job summary

MWResource is seeking a contract Splunk Security Engineer to administer and optimize Splunk Enterprise and Splunk SOAR environments. The role covers data onboarding, health monitoring, and performance tuning, with emphasis on building SOAR playbooks and integrating with security tools.

The candidate will work in a hybrid Austin area setting, 2 onsite days weekly, and participate in upgrades, incident response support, and knowledge transfer through documentation.

Qualifications

• 3+ years hands-on Splunk Enterprise administration.
• Experience building Splunk SOAR playbooks.
• Experience integrating Splunk/SOAR with security tools.
• Experience with REST API-based integrations.
• Experience troubleshooting API, network, and authentication issues.
• Strong SPL skills for correlation searches and dashboards.

Responsibilities

• Manage and maintain Splunk Enterprise for data onboarding, index management, health, and performance tuning.
• Build and maintain Splunk SOAR playbooks and integrations.
• Support upgrades, patching, and service delivery workflows.
• Document architecture, playbooks, and procedures.

Skills

Splunk Enterprise

Splunk SOAR

Security integrations

REST APIs

Troubleshooting

SPL / Dashboards

Education

Bachelor's Degree in Cyber Security

Bachelor's Degree in CS or MIS or related

Tools

Python

PowerShell

Job description

MWResource is seeking a contract Splunk Security Engineer to administer and optimize Splunk Enterprise and Splunk SOAR environments. The role covers data onboarding, health monitoring, and performance tuning, with emphasis on building SOAR playbooks and integrating with security tools.

The candidate will work in a hybrid Austin area setting, 2 onsite days weekly, and participate in upgrades, incident response support, and knowledge transfer through documentation.