Senior Security Engineer - Splunk

Design, implement, and maintain complex Splunk deployments for security monitoring, threat detection, data ingestion, and search optimization

Document and map the architecture of current Splunk infrastructure and lead the development of a security engineering roadmap for future improvements.

Develop and optimize Splunk searches, dashboards, and alerts to enhance security operations

Define and manage index clustering, search head clustering, and forwarder deployment.

Lead end-to-end Splunk deployment and configuration projects, including infrastructure planning, installation, and integration.

Troubleshoot complex Splunk issues involving search performance, indexing, ingestion, parsing, data availability, clustering, storage, authentication, configuration, and integrations with other security tools, as well as providing root-cause analysis of Splunk outages, degradation, data loss, ingestion issues and performance problems.

Conduct performance tuning and capacity planning for Splunk Environments

Collaborate with cross-functional teams to integrate Splunk with other security tools and data sources and analyze how Splunk interacts with other security tools throughout the broad security ecosystem.

Help lead discussions regarding Splunk optimization, modernization, consolidation, automation, scalability, and efficiency and develop recommendations for improving Splunk reliability, and availability

Lead the Cribl to Splunk integration and data pipeline optimization, ensuring efficient routing, filtering, transformation, and delivery data into Splunk as well as improve data quality, reduce ingestion, and enhance overall platform performance

Serve as the team’s point of contact for security tool operation and management and provide support to Splunk engineers and cross-functional teams.

Embed Splunk across a wide range of tools across Enterprise IT operations to ingest endpoint and firewall logs, analyze vulnerability scanning data, enhance privileged access monitoring and audit logging, monitor encryption and key management, and enhance threat detection and incident response.