Senior Cybersecurity Splunk Engineer

Recutify Inc.; Irving (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

Recutify Inc. seeks a Senior Cybersecurity Splunk Engineer to lead Splunk monitoring, log onboarding, and security analytics for a divestiture program. You will configure ingestions, dashboards, alerts, and correlation rules while collaborating across infrastructure, network, IAM, and security teams.

The role requires 8–12 years of experience with Splunk Enterprise and Splunk ES, strong scripting (Python/PowerShell), and excellent communication and documentation skills.

Qualifications

• Hands-on experience with Splunk Enterprise and Splunk Enterprise Security.
• 5-8 years of experience.
• Expertise in log onboarding, parsing, normalization, dashboards, alerts, and correlation rules.
• Strong knowledge of SIEM operations, threat detection, and security monitoring.
• Experience with application, infrastructure, network, IAM, endpoint, and cloud security logs.
• Proficiency in SPL and scripting (Python, PowerShell, APIs) for automation.
• Experience supporting logging and monitoring separation activities in large enterprise environments.
• Strong troubleshooting, analytical, documentation, and communication skills.
• Effective written and verbal communication skills.
• Effective analytic/diagnostic skills.
• Bachelor's degree/University degree or equivalent experience

Responsibilities

• Lead Splunk monitoring, log onboarding, and security analytics activities for the divestiture program.
• Configure and validate log ingestion, dashboards, alerts, correlation rules, and reporting.
• Support Splunk monitoring separation and transition for in-scope systems and entities.
• Troubleshoot data ingestion, indexing, alerting, and performance issues.
• Collaborate with infrastructure, network, IAM, application, and security teams.
• Develop operational documentation, monitor reports, and audit evidence

Skills

Splunk Enterprise

Splunk ES

Log Onboarding

Dashboards

Alerts

Correlation Rules

SIEM Ops

Threat Detection

Security Monitoring

Security Logs

SPL

Python

PowerShell

APIs

Documentation

Communication

Education

Bachelor's degree

Tools

Splunk

Splunk Enterprise Security

Python

PowerShell

Job description

Title: Senior Cybersecurity Splunk Engineer

Location: Irving, TX or Jacksonville, FL/Onsite

Video Interviews
Experience required: 8 - 12 years of experience

JOB DESCRIPTION:

Must Have Technical/Functional Skills

• Hands-on experience with Splunk Enterprise and Splunk Enterprise Security.
• 5-8 years of experience
• Expertise in log onboarding, parsing, normalization, dashboards, alerts, and correlation rules.
• Strong knowledge of SIEM operations, threat detection, and security monitoring.
• Experience with application, infrastructure, network, IAM, endpoint, and cloud security logs.
• Proficiency in SPL and scripting (Python, PowerShell, APIs) for automation.
• Experience supporting logging and monitoring separation activities in large enterprise environments.
• Strong troubleshooting, analytical, documentation, and communication skills
• Effective written and verbal communication skills
• Effective analytic/diagnostic skills
• Bachelor's degree/University degree or equivalent experience

Roles & Responsibilities

Services:

• Lead Splunk monitoring, log onboarding, and security analytics activities for the divestiture program.
• Configure and validate log ingestion, dashboards, alerts, correlation rules, and reporting.
• Support Splunk monitoring separation and transition for in-scope systems and entities.
• Troubleshoot data ingestion, indexing, alerting, and performance issues.
• Collaborate with infrastructure, network, IAM, application, and security teams.
• Develop operational documentation, monitor reports, and audit evidence

Deliverables

• Splunk Monitoring & Detection Framework Configured dashboards, alerts, and correlation rules.
• Log Onboarding & Validation Reports Verified data ingestion and monitoring coverage.
• Monitoring Gap & Remediation Tracker Identified issues and resolution status.
• Splunk Operational Documentation Runbooks, configurations, and support procedures.
• Security Monitoring & Audit Readiness Reports Control assurance, coverage, and compliance evidence.
• Divestiture Monitoring Transition Package Validated monitoring capabilities supporting secure separation