Senior Cybersecurity Engineer (Splunk)
The Senior Cybersecurity Engineer - Splunk will lead Splunk monitoring, log onboarding, security analytics, and operational readiness activities for a divestiture program. The role focuses on configuring and validating dashboards, alerts, correlation rules, reporting, and audit evidence to support secure monitoring separation and transition.
Key Responsibilities
Splunk Monitoring & Security Analytics
- Lead Splunk monitoring, log onboarding, and security analytics activities for the divestiture program.
- Configure and validate log ingestion, dashboards, alerts, correlation rules, and reporting.
- Develop and optimize monitoring capabilities to support security detection and operational visibility.
Monitoring Separation & Transition Support
- Support Splunk monitoring separation and transition for in-scope systems and business entities.
- Validate monitoring coverage and ensure required logs, alerts, dashboards, and reports are aligned to transition needs.
- Coordinate monitoring readiness activities to support secure divestiture execution.
Troubleshooting & Platform Support
- Troubleshoot data ingestion, indexing, alerting, correlation rule, reporting, and performance issues.
- Identify monitoring gaps and support remediation with relevant technical teams.
- Ensure Splunk monitoring remains reliable, accurate, and operationally effective.
Cross-Functional Collaboration
- Collaborate with infrastructure, network, IAM, application, and security teams for log onboarding and monitoring validation.
- Work with stakeholders to align Splunk monitoring requirements with program objectives and security controls.
- Provide technical guidance on Splunk monitoring best practices and operational procedures.
Documentation, Reporting & Audit Readiness
- Develop operational documentation, runbooks, configuration details, support procedures, and monitor reports.
- Prepare audit evidence, monitoring reports, and control assurance documentation.
- Support compliance and audit readiness through accurate reporting and documented monitoring coverage.
Required Skills & Experience
- Strong hands-on experience with Splunk Enterprise and/or Splunk Enterprise Security.
- Experience in log onboarding, data ingestion validation, dashboards, alerts, correlation rules, and reporting.
- Ability to troubleshoot Splunk ingestion, indexing, alerting, and performance-related issues.
- Good understanding of cybersecurity monitoring, SIEM operations, security analytics, and control assurance.
- Experience collaborating with infrastr ucture, network, IAM, application, and security teams.
- Strong documentation, reporting, analytical, and stakeholder management skills.
- Experience supporting monitoring transition, separation, migration, or divestiture-related programs is preferred.
Salary Range- $80,000-$110,000 a year
#LI-SP3
#LI-VX1