Splunk Security Engineer - SIEM & Dashboards

zotecpartners; Carmel (IN); On-site; USD 105,000 - 140,000; Full time

Job summary

Zotec Partners is seeking a Splunk Security Engineer to join our Information Security team. You will administer Splunk environments (Enterprise, ITSI, ES) and Cloud deployments, develop dashboards, and optimize searches to strengthen security monitoring across the organization.

You will work with cross-functional teams, implement access controls, onboard data sources, and support cloud ingestion while staying current with Splunk updates and industry best practices.

Qualifications

• 3+ years of experience administering and supporting Splunk environments.
• Experience with Splunk Enterprise Security (ES) and/or IT Service Intelligence (ITSI).
• Strong understanding of search processing language (SPL) and dashboard creation.
• Knowledge of log sources, parsing, and normalization techniques.
• Detailed technical knowledge of database and operating system security.
• Experience with Linux/Unix, Windows, and MacOS operating systems.
• Understanding of network security concepts and security monitoring.
• Strong analytical and problem-solving abilities.
• Excellent communication and documentation skills.
• Ability to work under pressure and adapt to changing priorities.
• Detail-oriented with strong organizational skills.

Responsibilities

• Administer and maintain Splunk Enterprise environment and Splunk Cloud setup.
• Deploy, configure, and update Splunk Enterprise Security (ES) and ITSI.
• Coordinate and configure new Splunk resources as needed.
• Configure and secure Splunk endpoints.
• Install, configure, and update apps from Splunkbase.
• Keep Splunk and apps up to date.
• Run health checks on Splunk systems.
• Manage deployments to servers and workstations.
• Update user index permissions.
• Design and maintain dashboards, reports, and alerts.
• Create and refine SPL queries for better detection.
• Develop visualizations to meet business needs.
• Implement role-based access controls for dashboards/reports.
• Provide training and end-user support for dashboards.
• Assist with dashboard creation and search building.

Skills

Splunk

SPL

Dashboard development

Security monitoring

Incident response

Unix/Linux

Windows

On-call support

Tools

Splunk Enterprise

Splunk ITSI

Splunk ES

Splunk Cloud

HTTP Event Collector

Job description

Zotec Partners is seeking a Splunk Security Engineer to join our Information Security team. You will administer Splunk environments (Enterprise, ITSI, ES) and Cloud deployments, develop dashboards, and optimize searches to strengthen security monitoring across the organization.

You will work with cross-functional teams, implement access controls, onboard data sources, and support cloud ingestion while staying current with Splunk updates and industry best practices.