Splunk Architect

Links Technology Solutions, Inc.; Village of Tarrytown (NY); À distance; USD 103 000 - 121 000; Plein temps

Résumé du poste

Links Technology Solutions, Inc. seeks a Certified Splunk Architect to design, implement, and optimize large-scale Splunk environments across Enterprise and Cloud deployments.

You will focus on security detection engineering, automation, and building innovative security and operations solutions using Splunk products. The role requires leading with Splunk ES, SOAR, and cross-functional collaboration to deliver actionable intelligence and high-performance dashboards.

Qualifications

• Active Splunk Certified Architect certification.
• Experience designing large-scale Splunk Enterprise and Splunk Cloud environments.
• Ability to lead security detection engineering initiatives and collaborate with cross-functional teams.

Responsabilités

• Design, implement, and maintain large-scale Splunk Enterprise and Splunk Cloud environments.
• Develop and enhance custom security detection rules and risk-based alerting frameworks.
• Architect and implement Splunk Enterprise Security solutions for monitoring and threat detection.
• Develop automated workflows using Splunk SOAR and other tools to streamline processes.
• Create executive dashboards to monitor detection readiness and security metrics.
• Perform health checks, performance tuning, and optimize resources for faster searches.
• Maintain integrations across security data sources and platforms.
• Act as SME, providing guidance to Security, Operations, and Business teams.
• Collaborate with teams to develop innovative Splunk use cases.

Connaissances

Splunk Certified Architect

Splunk

Security

Outils

Splunk Enterprise

Splunk Cloud

Splunk ES

Splunk SOAR

Description du poste

CERTIFIED SPLUNK ARCHITECT

Location: Remote

Pay Rate: $75–$88 per hour

Hours: Full-Time | Remote

Duration: Long-Term Contract

Summary

Our client in the pharma industry is seeking an experienced Certified Splunk Architect to design, implement, and optimize a large-scale, hybrid Splunk environment. This role focuses on advanced security detection engineering, automation, and developing innovative security, operations, and business solutions utilizing Splunk Enterprise, Splunk Cloud, and Splunk Enterprise Security (ES).

Description – Certified Splunk Architect

• Design, implement, and maintain complex, large-scale Splunk Enterprise and Splunk Cloud environments.
• Develop and enhance custom security detection rules, integrating third-party tools and Splunk Behavioral Analytics within a Risk-Based Alerting (RBA) framework.
• Architect and implement advanced Splunk Enterprise Security (ES) solutions to support security monitoring, threat detection, and actionable intelligence.
• Design and develop automated workflows using Splunk SOAR and other automation tools to streamline pre-ticket and post-ticket processes.
• Create executive-level and technical dashboards to monitor security detection readiness, operational performance, and key security metrics.
• Conduct regular Splunk environment health checks, performance tuning, and infrastructure optimization to improve search latency, data processing, and resource utilization.
• Develop and maintain integrations across multiple security data sources and platforms.
• Serve as a Splunk Subject Matter Expert (SME), providing technical leadership, documentation, and guidance to Security, Operations, and Business teams.
• Collaborate with cross-functional teams to develop innovative Splunk use cases and enhance overall security operations.

Qualifications – Certified Splunk Architect

• Required: Active Splunk Certified Architect certification.