SIEM Subject Matter Expert (Splunk)
Core
Manage and optimize large-scale Splunk Enterprise Security deployments to enhance Security Operations Center (SOC) throughput and platform health.
Role type
Senior IC SIEM Subject Matter Expert (Splunk)
Builds
SIEM architecture, correlation rules, SOAR integrations, and automated alert enrichment
Domain
Cybersecurity / SIEM / Log Management
Required skills
Splunk architecture, Search Processing Language (SPL), SIEM-to-SOAR integration, MITRE ATT&CK framework, log normalization, capacity planning, platform lifecycle management
Preferred skills
Splunk Certified Architect, mentoring SOC analysts
Technologies
Splunk Enterprise Security, SOAR platforms, MITRE ATT&CK
Responsibilities
Own Splunk Enterprise Security architecture, sizing, and platform health management; Develop and tune correlation rules mapped to MITRE ATT&CK; Onboard new log sources and normalize data; Build and maintain SIEM-to-SOAR integrations; Produce performance reporting and capacity-planning recommendations; Support platform upgrades, patching, and lifecycle management; Train and mentor SOC analysts; Troubleshoot platform performance and data-quality issues
Seniority
Senior, hands-on IC
