Splunk Engineer
Core
Configure, maintain, and tune Splunk alerts and event-based detections; build integrations with platforms like ServiceNow and Microsoft Teams; onboard log sources and manage data inputs.
Role type
Splunk Engineer (SIEM & Observability)
Builds
Alert configurations, integrations, dashboards, and log ingestion pipelines
Domain
Cybersecurity, Observability, SIEM
Required skills
Splunk Enterprise, Splunk Cloud, SPL, alert configuration, scheduled searches, API integrations, webhooks, log management, SIEM concepts, data onboarding, forwarders, parsers
Preferred skills
Troubleshooting ingestion issues, tuning false positives, documenting technical processes
Technologies
Splunk, ServiceNow, Microsoft Teams
Responsibilities
Configure and tune Splunk alerts and event-based detections; Build and support integrations between Splunk and external platforms; Onboard new log sources and manage data inputs, forwarders, and parsers; Troubleshoot ingestion, alerting, and integration issues; Build dashboards and support reporting needs; Document technical processes and operational procedures
Seniority
Mid-level, hands-on IC