Security Splunk Engineer — SIEM & Dashboards

Zotec Partners; Carmel (IN); On-site; USD 110,000 - 160,000; Full time

Job summary

Zotec Partners is seeking a Splunk Security Engineer to join our Information Security team. You will administer Splunk environments, including ES/ITSI, develop dashboards, and optimize data ingestion while collaborating with cross-functional teams in a fast-paced healthcare tech environment.

The role focuses on security monitoring, incident support, and on-call rotation, with opportunities to advance Splunk expertise and implement robust monitoring controls across cloud and on-premises

Qualifications

• 3+ years administering Splunk environments.
• Experience with Splunk Enterprise Security (ES) and/or IT Service Intelligence (ITSI).
• Strong SPL and dashboard skills.
• Knowledge of log parsing and normalization techniques.
• Security-focused with OS security knowledge.
• Experience on Linux/Unix, Windows, and MacOS.
• Understanding of network security concepts.
• Analytical, problem-solving mindset.
• Excellent communication and documentation.
• Ability to work under pressure and adapt to changing priorities.
• Detail-oriented with strong organizational skills.
• Team player with collaboration.
• Ability to prioritize tasks and manage time effectively.

Responsibilities

• Administer and maintain Splunk Enterprise and Cloud deployments.
• Configure ES, ITSI, and new Splunk resources.
• Develop and maintain dashboards, reports, and alerts.
• Create SPL queries and custom visualizations.
• Onboard data sources and configure HEC tokens.
• Ensure proper parsing and field extractions for logs.
• Troubleshoot issues and support incidents.
• Participate in on-call rotation and stay current with best practices.

Skills

Splunk administration

ES/ITSI experience

SPL & dashboards

Log parsing & normalization

OS security knowledge

Linux/Unix, Windows, MacOS

Network security concepts

Analytical/problem-solving

Communication & documentation

Prioritization & time management

Team collaboration

Discretion & judgment

Tools

Splunk

Job description

Zotec Partners is seeking a Splunk Security Engineer to join our Information Security team. You will administer Splunk environments, including ES/ITSI, develop dashboards, and optimize data ingestion while collaborating with cross-functional teams in a fast-paced healthcare tech environment.

The role focuses on security monitoring, incident support, and on-call rotation, with opportunities to advance Splunk expertise and implement robust monitoring controls across cloud and on-premises