Senior Splunk SIEM Engineer – Threat Detection & Automation

Automatic Data Processing, Inc.; Deer Park (IL); On-site; USD 150,000 - 170,000; Full time

Job summary

Net56 is seeking a skilled Splunk Engineer to design, deploy, and operate a distributed Splunk environment across on-premises, cloud, and client infrastructures.

You will develop dashboards, correlation searches, and automated detections while mapping detections to MITRE ATT&CK, NIST 800-53, and CIS Controls. Collaboration with security operations and network teams is essential for incident triage and ongoing optimization.

Qualifications

• Bachelor’s degree in IT, CS, Cybersecurity, or related field.
• 5+ years of relevant experience.
• Splunk Enterprise Certified Admin is required; Architect preferred.
• Knowledge of MITRE ATT&CK, NIST 800-53, CIS Controls.

Responsibilities

• Design, deploy, and maintain a distributed Splunk environment across on-prem, cloud, and client infrastructures.
• Develop dashboards and correlation searches; automate threat detection and incident triage workflows.
• Collaborate with security and network teams; ensure compliance and documentation (SOPs, runbooks).
• Escalate incidents and document topology and data flows; maintain Splunk CLI and parsing pipelines.

Skills

Splunk

Scripting (Python/Bash/PowerShell)

Linux administration

Windows Server administration

Networking fundamentals

Education

Bachelor’s Degree in Information Technology, Computer Science, Cybersecurity, or related field

Tools

Splunk

Splunk Enterprise

REST APIs

Job description

Net56 is seeking a skilled Splunk Engineer to design, deploy, and operate a distributed Splunk environment across on-premises, cloud, and client infrastructures.

You will develop dashboards, correlation searches, and automated detections while mapping detections to MITRE ATT&CK, NIST 800-53, and CIS Controls. Collaboration with security operations and network teams is essential for incident triage and ongoing optimization.