Splunk SIEM Engineer: Detections & Dashboards (Hybrid)

Insight Global; Fulton (MD); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Benefits from Day 1

Job summary

Insight Global is seeking a proactive SIEM Engineer focused on Splunk engineering, detection development, and cloud security operations. The role supports security monitoring and incident response across Splunk ES, Splunk SOAR, and cloud platforms in AWS and Azure environments.

The ideal candidate will develop detections, dashboards, automation workflows, and data onboarding initiatives, while troubleshooting and maintaining distributed Splunk environments.

Qualifications

• 5+ years of professional experience in SIEM engineering, security operations, or incident response.
• Ability to write complex SPL queries and build dashboards in Splunk.
• Experience onboarding/integrating security data sources into Splunk and integrating tools like AWS Security Hub.
• Willingness to participate in on-call rotation.
• Proven ability to present technical findings to diverse stakeholders.

Responsibilities

• Develop and optimize Splunk ES detections, dashboards, and correlation searches.
• Support Splunk SOAR playbook development and automation workflows.
• Onboard, parse, normalize, and enrich security data sources into Splunk.
• Troubleshoot ingestion pipelines, forwarder connectivity, and search performance.
• Collaborate with SOC analysts and engineering to improve visibility and detection coverage.
• Participate in on-call rotations and 24/7 incident response activities.

Skills

SIEM engineering

Splunk SPL queries

Data onboarding into Splunk

Incident response

Communication

Tools

Splunk Enterprise

Splunk Enterprise Security (ES)

Splunk SOAR

Job description

Insight Global is seeking a proactive SIEM Engineer focused on Splunk engineering, detection development, and cloud security operations. The role supports security monitoring and incident response across Splunk ES, Splunk SOAR, and cloud platforms in AWS and Azure environments.

The ideal candidate will develop detections, dashboards, automation workflows, and data onboarding initiatives, while troubleshooting and maintaining distributed Splunk environments.