Splunk Security Engineer

Splunk Security Engineer

Location: Dallas, TX – 12+ Months

Work Model: Hybrid – 3 Days Onsite (Tuesday, Wednesday & Thursday)

Visa - USC, GC, GCEAD, H4EAD, H1B

Job Summary:+

We are looking for an experienced Splunk Security Engineer with 8+ years of experience in SIEM engineering, security monitoring, threat detection, and Splunk administration. The candidate should have strong hands-on experience with Splunk Enterprise, Splunk Enterprise Security (ES), SPL development, log onboarding, and detection engineering.

Note: Must be willing to work onsite at the Hitachi Dallas office 3 days per week (Tuesday, Wednesday, and Thursday).

Required Skills:

• Strong hands-on experience with Splunk Enterprise and Splunk Enterprise Security (ES).
• Expertise in SPL query development, optimization, and troubleshooting.
• Experience onboarding enterprise log sources, including Windows, Linux, Active Directory, AWS, Azure, GCP, Firewalls, EDR, and IAM.
• Strong knowledge of log ingestion, parsing, indexing, normalization, and CIM mapping.
• Experience developing Splunk dashboards, reports, alerts, and correlation searches.
• Expertise in threat detection, threat hunting, and detection engineering.
• Experience tuning SIEM alerts and reducing false positives.
• Strong understanding of Windows, Linux, networking, cloud security, and SOC operations.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain, threat intelligence, and incident response.
• Experience with Python, Bash, and Splunk automation.

Preferred Certifications:

• Splunk Enterprise Certified Admin / Architect
• Microsoft SC-200
• CISSP
• GCIH / GCIA