Splunk Onboarding & Content Architect

First-Horizon-Bank; Memphis (TN); On-site; USD 110,000 - 160,000; Full time

Job summary

First Horizon Bank is seeking a Splunk Onboarding and Content Engineer to lead the onboarding of application logs into Splunk, develop dashboards and alerts, and partner with owners across security, operations, and infrastructure to improve visibility and incident response.

The role requires hands-on Splunk development, data validation, and the ability to translate business questions into data requirements while coordinating with multiple teams. On-site in the Memphis area preferred.

Qualifications

• Experience using Splunk Enterprise or Splunk Cloud to search, analyze, visualize, and alert on machine data.
• Proficiency with SPL, including filtering, time-based analysis, and performance-conscious design.
• Experience building production dashboards, alerts, and reports for technical/business stakeholders.
• Experience coordinating work across application owners, engineering, infrastructure, security, vendors, and stakeholders.
• Knowledge of log collection/transport concepts and structured data formats.

Responsibilities

• Coordinate onboarding of application logs into Splunk from discovery to production handoff.
• Identify log sources, ownership, retention needs, and priority use cases with stakeholders.
• Validate data flow, timestamps, field extractions, permissions, and search performance.
• Document host names, APIs, DB connections, cloud services and sample events for onboarding.
• Coordinate onboarding via universal forwarders, syslog, APIs, cloud integrations, and add-ons.
• Develop dashboards, alerts, reports, and scheduled searches aligned with owner needs.
• Lead use-case workshops to translate questions into Splunk content.
• Test alerts, tune thresholds, and document ownership and escalation paths.
• Identify sensitive data and coordinate masking/minimization with data owners.

Skills

Splunk Enterprise

Splunk Cloud

SPL (Search Processing Language)

Dashboards & Alerts

Stakeholder coordination

Onboarding experience

Security/log data expertise

Python/PowerShell scripting

Logging & data modeling

Tools

Splunk CIM

Splunk Admin / ES

Splunk Add-ons

Job description

First Horizon Bank is seeking a Splunk Onboarding and Content Engineer to lead the onboarding of application logs into Splunk, develop dashboards and alerts, and partner with owners across security, operations, and infrastructure to improve visibility and incident response.

The role requires hands-on Splunk development, data validation, and the ability to translate business questions into data requirements while coordinating with multiple teams. On-site in the Memphis area preferred.