Cyber security Engineer(Splunk)

Job Description

Senior Cybersecurity Engineer (Splunk)

The Senior Cybersecurity Engineer Splunk will lead Splunk monitoring, log onboarding, security analytics, and operational readiness activities for a divestiture program. The role focuses on configuring and validating dashboards, alerts, correlation rules, reporting, and audit evidence to support secure monitoring separation and transition.

Key Responsibilities

Splunk Monitoring & Security Analytics

Lead Splunk monitoring, log onboarding, and security analytics activities for the divestiture program.

Configure and validate log ingestion, dashboards, alerts, correlation rules, and reporting.

Develop and optimize monitoring capabilities to support security detection and operational visibility.

Monitoring Separation & Transition Support

Support Splunk monitoring separation and transition for in-scope systems and business entities.

Validate monitoring coverage and ensure required logs, alerts, dashboards, and reports are aligned to transition needs.

Coordinate monitoring readiness activities to support secure divestiture execution.

Troubleshooting & Platform Support

Troubleshoot data ingestion, indexing, alerting, correlation rule, reporting, and performance issues.

Identify monitoring gaps and support remediation with relevant technical teams.

Ensure Splunk monitoring remains reliable, accurate, and operationally effective.

Cross-Functional Collaboration

Collaborate with infrastructure, network, IAM, application, and security teams for log onboarding and monitoring validation.

Work with stakeholders to align Splunk monitoring requirements with program objectives and security controls.

Provide technical guidance on Splunk monitoring best practices and operational procedures.

Documentation, Reporting & Audit Readiness

Develop operational documentation, runbooks, configuration details, support procedures, and monitor reports.

Prepare audit evidence, monitoring reports, and control assurance documentation.

Support compliance and audit readiness through accurate reporting and documented monitoring coverage.

Required Skills & Experience

Strong hands-on experience with Splunk Enterprise and/or Splunk Enterprise Security.

Experience in log onboarding, data ingestion validation, dashboards, alerts, correlation rules, and reporting.

Ability to troubleshoot Splunk ingestion, indexing, alerting, and performance-related issues.

Good understanding of cybersecurity monitoring, SIEM operations, security analytics, and control assurance.

Experience collaborating with infrastr ucture, network, IAM, application, and security teams.

Strong documentation, reporting, analytical, and stakeholder management skills.

Experience supporting monitoring transition, separation, migration, or divestiture-related programs is preferred.