Senior Cybersecurity Engineer (Splunk)

The Senior Cybersecurity Engineer Splunk will lead Splunk monitoring, log onboarding, security analytics, and operational readiness activities for a divestiture program. The role focuses on configuring and validating dashboards, alerts, correlation rules, reporting, and audit evidence to support secure monitoring separation and transition.

Key Responsibilities

Splunk Monitoring & Security Analytics
• Lead Splunk monitoring, log onboarding, and security analytics activities for the divestiture program.
• Configure and validate log ingestion, dashboards, alerts, correlation rules, and reporting.
• Develop and optimize monitoring capabilities to support security detection and operational visibility.

Monitoring Separation & Transition Support
• Support Splunk monitoring separation and transition for in-scope systems and business entities.
• Validate monitoring coverage and ensure required logs, alerts, dashboards, and reports are aligned to transition needs.
• Coordinate monitoring readiness activities to support secure divestiture execution.

Troubleshooting & Platform Support
• Troubleshoot data ingestion, indexing, alerting, correlation rule, reporting, and performance issues.
• Identify monitoring gaps and support remediation with relevant technical teams.
• Ensure Splunk monitoring remains reliable, accurate, and operationally effective.

Cross-Functional Collaboration
• Collaborate with infrastructure, network, IAM, application, and security teams for log onboarding and monitoring validation.
• Work with stakeholders to align Splunk monitoring requirements with program objectives and security controls.
• Provide technical guidance on Splunk monitoring best practices and operational procedures.

Documentation, Reporting & Audit Readiness
• Develop operational documentation, runbooks, configuration details, support procedures, and monitor reports.
• Prepare audit evidence, monitoring reports, and control assurance documentation.
• Support compliance and audit readiness through accurate reporting and documented monitoring coverage.

Required Skills & Experience
• Strong hands-on experience with Splunk Enterprise and/or Splunk Enterprise Security.
• Experience in log onboarding, data ingestion validation, dashboards, alerts, correlation rules, and reporting.
• Ability to troubleshoot Splunk ingestion, indexing, alerting, and performance-related issues.
• Good understanding of cybersecurity monitoring, SIEM operations, security analytics, and control assurance.
• Experience collaborating with infrastr ucture, network, IAM, application, and security teams.
• Strong documentation, reporting, analytical, and stakeholder management skills.
• Experience supporting monitoring transition, separation, migration, or divestiture-related programs is preferred.

Salary Range- $80,000-$110,000 a year

#LI-SP3

#LI-VX1