Senior Splunk Consultant — Enterprise SIEM Expert

TeraSky; Illinois; On-site; USD 120,000 - 180,000; Full time

Job summary

TeraSky, a global technology solutions provider, seeks a Senior Splunk Consultant to lead hands-on delivery for enterprise customers across on‑premises, cloud and hybrid environments. You will architect Splunk platforms, onboard data, and implement Splunk Enterprise Security, including detections and dashboards, while guiding customers and contributing to presales with technical estimates.

You will mentor teams, optimize performance, and ensure successful security operations with SIEM, SOAR, and

Qualifications

• 5+ years of hands-on Splunk experience in production.
• 2+ years with Splunk Enterprise Security.
• Experience designing and managing distributed Splunk environments (search heads, indexers, forwarders, capacity planning and retention).
• Hands-on experience implementing and configuring Splunk Enterprise Security (correlation searches, MITRE ATT&CK-aligned detections, risk-based alerting, asset and identity enrichment).
• Strong SPL, CIM and data onboarding skills (props/transforms, field extractions, forwarders, HEC, syslog).
• Experience optimizing Splunk and ES performance (search tuning, data model acceleration, search scheduling, concurrency, detection tuning).
• Solid cybersecurity and networking knowledge (Windows/AD and Microsoft Entra ID logs; Linux; AWS/Azure/GCP).
• Strong analytical, troubleshooting and customer-facing skills.
• Scripting: Python, Bash or PowerShell; automation with Terraform or Ansible.
• Familiarity with Splunk AI Assistant and Splunk MCP Server (advantage).
• Relevant Splunk certifications or experience with SIEM migrations, SOAR playbooks, Edge/Ingest Processor, observability or CI/CD (advantage).

Responsibilities

• Design, implement and optimize Splunk Enterprise and Splunk Cloud Platform environments (architecture, sizing, retention, performance, troubleshooting).
• Deliver Splunk Enterprise Security solutions (data onboarding, CIM normalization, MITRE ATT&CK detections, risk-based alerting, dashboards, reports).
• Automate deployments and integrate security and ITSM platforms; support scoping, documentation, workshops and knowledge transfer.

Skills

Splunk

Splunk Enterprise Security

SPL

Data onboarding

MITRE ATT&CK

Python

Bash

PowerShell

Linux

Windows AD

AWS

Azure

GCP

Terraform

Ansible

SOAR

SIEM migrations

Observability

CI/CD

AI Assistant

Splunk MCP Server

Education

Splunk certifications

Tools

Terraform

Ansible

Job description

TeraSky, a global technology solutions provider, seeks a Senior Splunk Consultant to lead hands-on delivery for enterprise customers across on‑premises, cloud and hybrid environments. You will architect Splunk platforms, onboard data, and implement Splunk Enterprise Security, including detections and dashboards, while guiding customers and contributing to presales with technical estimates.

You will mentor teams, optimize performance, and ensure successful security operations with SIEM, SOAR, and