Senior SIEM/SOAR Engineer | Splunk & IAM Lead

Staffing Spot, Inc.; Charlotte (NC); On-site; USD 140,000 - 180,000; Full time

Job summary

Staffing Spot, Inc. is seeking a Senior Cybersecurity professional focused on SIEM/SOAR production support with a strong emphasis on Splunk and IAM.

The role covers keeping security platforms running, resolving production issues, detecting threats, and automating responses. The candidate will provide strong L2/L3 production support in a regulated financial services environment, build and tune Splunk queries and SOAR playbooks, and work with Linux/Windows, SQL/Oracle, and related tooling.

Qualifications

• Minimum 5 years in SIEM/SOAR and production support.
• Hands-on Splunk experience with dashboards and alerts.
• Experience with IAM/MFA/access management.
• Strong Linux skills; Windows administration.
• Knowledge of SQL/Oracle databases and scripting.
• ITIL incident management and root cause analysis.
• Excellent communication and problem-solving.

Responsibilities

• Manage and optimize Splunk/SIEM/SOAR environments.
• Build Splunk queries, alerts, dashboards, detection rules, and SOAR playbooks.
• Monitor security events and troubleshoot production issues.
• Support IAM, MFA, authentication, and access management.
• Perform incident management, RCA, and service restoration.
• Work with Linux/Windows, SQL/Oracle, Ansible, Jenkins, OpenShift, Remedy, Dynatrace.
• On-call/off-hours support and 3 days onsite.

Skills

SIEM/SOAR

Linux

Windows

ITIL

Communication

Problem-solving

Incident management

On-call support

Tools

Splunk

SOAR

Remedy

Dynatrace

Ansible

Jenkins

OpenShift

SQL

Oracle

Tower/BladeLogic

GitHub

Job description

Staffing Spot, Inc. is seeking a Senior Cybersecurity professional focused on SIEM/SOAR production support with a strong emphasis on Splunk and IAM.

The role covers keeping security platforms running, resolving production issues, detecting threats, and automating responses. The candidate will provide strong L2/L3 production support in a regulated financial services environment, build and tune Splunk queries and SOAR playbooks, and work with Linux/Windows, SQL/Oracle, and related tooling.