Security Engineer (Splunk)

📋 Description

• Maintain SIEMs (Splunk, Sentinel, ELK, LogRhythm, Sumo Logic) in AWS/Azure/GCP.
• Manage log collection across hybrid environments (forwarders, collectors, ingestion pipelines).
• Tune SIEM performance, storage, retention, and licensing.
• Implement retention and audit configurations aligned with FedRAMP/compliance.
• Develop, tune, and maintain detection rules, correlation searches, and alert logic.
• Create/maintain custom parsers for complex logs.

🎯 Requirements

• 3+ years hands-on systems engineering/architecture experience.
• 3+ years cloud experience (AWS, Azure, or GCP).
• SIEM platform expertise (Splunk, Sentinel, ELK, LogRhythm, Sumo Logic) and enterprise AV.
• Understanding of cloud platform capabilities (AWS/Azure/GCP).
• Experience in Agile environments with 3+ teammates.
• Bachelor’s degree or equivalent; US citizenship required for client work.

🎁 Benefits

• Flexible work model: work from home or office.
• Competitive perks: paid parental leave, certification reimbursement.
• Digital mental health support and comprehensive insurance.
• Equal opportunity and accommodations; HR support available.