Splunk ES Engineer

Job Title: Senior Privilege Access Monitoring Implementation Specialist Job ID:26-04094 Location: Remote Duration: 04 months on W2 contract Must haves: 4-5 years Splunk experience, 4-5 years IAM experience, monitoring-preferred (previous analyst work)-PLEASE SHOW ON RESUME

Job Summary Seeking a Senior Privilege Access Monitoring Implementation Specialist to design, implement, test, and document privileged access monitoring within a security operations environment. The role focuses on improving privileged access visibility, reducing false positives, and automating alert routing and incident handling using Splunk SIEM and SOAR technologies.

• Design and implement privileged access monitoring and detection logic.
• Develop Splunk correlation searches, custom alerts, dashboards, reports, and Risk-Based Alerting.
• Build SOAR playbooks and automation workflows for incident handling.
• Integrate SIEM, SOAR, and ticketing systems.
• Develop alert filtering, suppression, enrichment, and intelligent routing.
• Create dashboards to monitor alert volume, health, and effectiveness.
• Validate detections using historical data and optimize alert accuracy.
• Document searches, workflows, playbooks, runbooks, and operational procedures.
• Provide knowledge transfer and training to security operations teams.

• 5+ years in security operations, SIEM engineering, security engineering, or related cybersecurity.
• 4 5 years of hands-on Splunk experience must be clearly shown on resume.
• 4 5 years of IAM experience must be clearly shown on resume.
• Previous security monitoring/analyst experience preferred and should be highlighted on resume.
• Advanced Splunk correlation searches, alerting, dashboards, and Risk-Based Alerting.
• Strong knowledge of Splunk data pipelines, indexing, field extraction, and search optimization.
• 2+ years of SOAR experience with Cortex XSOAR, Demisto, or comparable platforms.
• Experience developing SOAR playbooks, automation, and SIEM/ticketing integrations.
• 2+ years of privileged access monitoring, IAM/PAM security, or related security operations experience.
• Understanding of privilege escalation detection, access controls, and authorization frameworks.
• Demonstrated experience reducing false positives and improving alert fidelity.

Compensation: The hourly rate for this position is $55.00 per hour. Factors which may affect starting pay within this range may include [geography/market, skills, education, experience and other qualifications of the successful candidate]. Benefits: Sunrise offers ACA compliant medical coverage/dental insurance/vision insurance to all employees. We also offer Sick time benefits as required per State regulations.

For applications and inquiries, contact:View email address on click.appcast.io