Splunk and Splunk SOAR Security Engineer

Overview:

TekWissen is a global workforce management provider headquartered in Ann Arbor, Michigan that offers strategic talent solutions to our clients world-wide. Our client is an American organization that operates Texas's electrical grid, the Texas Interconnection, which supplies power to more than 25 million Texas customers and represents 90 percent of the state's electric load. Our client is the first independent system operator (ISO) in the one of nine ISOs in North America. Our client works with the Texas Reliability Entity (TRE), one of eight regional entities within the North American Electric Reliability Corporation (NERC) that coordinate to improve reliability of the bulk power grid. Our client is a membership-based 501(c) nonprofit corporation, and its members include consumers, electric cooperatives, generators, power marketers, retail electric providers, investor-owned electric utilities (transmission and distribution providers), and municipally owned electric utilities.

Job Title: Splunk and Splunk SOAR Security Engineer

Location: Taylor TX 76574

Duration: 24 Months

Job Type: Temporary Assignment

Work Type: Hybrid

Job Description:

• Client's Security team is seeking a contract security engineer to take on day-to-day administration, engineering, and operational support for our Splunk Enterprise and Splunk SOAR environments.

Responsibilities:

• The Client will manage and maintain the Splunk Enterprise environment, including data onboarding, index and source type management, search head and indexer health, and performance tuning. On the SOAR side, they'll build and maintain playbooks, manage app/connector integrations, and support automation of playbooks across the broader security stack. The role also includes troubleshooting data ingestion issues, supporting upgrades and patching, and working with the broader security engineering team to align Splunk/SOAR use cases with Client 's detection and response priorities, and service delivery workflows. Documentation of architecture, playbooks, and standard operating procedures will be expected to support knowledge transfer.

Required qualifications:

• 3+ years hands-on experience administering Splunk Enterprise (indexers, search heads, forwarders, data onboarding)
• Direct experience building and maintaining Splunk SOAR playbooks
• Direct experience integrating Splunk/SOAR with endpoint, vulnerability, or other security tool
• Experience with REST API-based integrations
• Experience troubleshooting issues related to API, network, authentication and other integrations
• Strong SPL skills, including correlation searches, dashboard/report development, and system health monitoring

Preferred qualifications:

• Splunk certifications (Core Certified Power User, Certified Admin, or SOAR-specific certs)
• Scripting experience (Python, PowerShell) to support custom SOAR app development or automation
• Familiarity with security operations workflows: infrastructure build pipelines, alert triage, incident response, threat detection engineering

EDUCATION:

• Bachelor's Degree: Cyber Security, Computer Science, MIS, or related discipline (Preferred)
• or a combination of education and experience that provides equivalent knowledge to a major in such fields is required

TekWissen Group is an equal opportunity employer supporting workforce diversity.