Senior Splunk Threat Detection & Integrations Engineer

Quzara LLC; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

Quzara LLC is looking for a Principal Splunk Threat Detection & Integration Engineer to lead the detection content lifecycle within Splunk. This senior role requires expertise in building complex correlation searches and Risk-Based Alerting (RBA) logic, with a strong focus on mentoring and technical authorities for cross-domain detection challenges. Responsibilities include managing the Splunk ES framework, operationalizing Threat Intelligence, and engineering custom integrations. This position is remote, with a requirement to work in EST time zone.

Qualifications

• 8+ years experience in security engineering or detection content development, 5+ years using Splunk ES.
• Fluency in Splunk CIM and handling complex SPL tasks.
• Experience with Threat Intelligence Management inside a SIEM.

Responsibilities

• Own detection content lifecycle in Splunk Enterprise Security.
• Architect and govern Risk-Based Alerting program.
• Design and operate the Asset & Identity framework.

Skills

Security engineering

Splunk Enterprise Security management

SPL mastery

Detection engineering

Automation with Python

Education

Bachelor's or higher in relevant field

Tools

Splunk

Python

REST APIs

Job description

Quzara LLC is looking for a Principal Splunk Threat Detection & Integration Engineer to lead the detection content lifecycle within Splunk. This senior role requires expertise in building complex correlation searches and Risk-Based Alerting (RBA) logic, with a strong focus on mentoring and technical authorities for cross-domain detection challenges. Responsibilities include managing the Splunk ES framework, operationalizing Threat Intelligence, and engineering custom integrations. This position is remote, with a requirement to work in EST time zone.