Remote Splunk Detection Engineer - Advanced SIEM

DivIHN Integration Inc; United States; Remote; USD 100,000 - 130,000; Full time

Job summary

A technology services company is seeking a Splunk Detection Engineer to ensure effective logging and security event detection. This fully remote role requires significant experience with Splunk Enterprise Security and event logging solutions, along with strong analytical skills. Collaborate with IT teams to develop detections and improve data quality. Ideal candidates will have scripting knowledge in Python/PowerShell/Bash and be comfortable under pressure.

Qualifications

• Significant experience with Splunk and Splunk Enterprise Security.
• Experience with ticketing/case management.
• Comfort with regex, JSON and APIs.

Responsibilities

• Ensure proper formatting, ingestion, tagging, and utilization of security logs.
• Collaborate with cybersecurity analysts to implement detections.
• Develop and maintain searches and dashboards in Splunk Enterprise Security.

Skills

Experience with Splunk

Event logging solutions

Analytical and problem-solving skills

Experience with Git pipelines

Linux CLI usage

Scripting in Python/PowerShell/Bash

Tools

Splunk Universal Forwarder

SOAR tools

Job description

A technology services company is seeking a Splunk Detection Engineer to ensure effective logging and security event detection. This fully remote role requires significant experience with Splunk Enterprise Security and event logging solutions, along with strong analytical skills. Collaborate with IT teams to develop detections and improve data quality. Ideal candidates will have scripting knowledge in Python/PowerShell/Bash and be comfortable under pressure.