Security Engineer (SPLUNK)

📋 Description

• Maintain SIEM tools (Splunk, Sentinel, ELK, LogRhythm, Sumo Logic) in cloud envs.
• Manage log collection infra: forwarders, collectors, ingestion pipelines.
• Tune SIEM performance, storage, retention, and licensing.
• Implement log retention and audit configurations for FedRAMP and compliance.
• Develop, tune, and maintain detection rules, correlation searches, and alerts.
• Create and maintain custom parsers and field extractions.

🎯 Requirements

• 3+ years of hands-on systems engineering and architecture.
• 3+ years cloud experience (AWS, Azure, or GCP).
• SIEM expertise: Splunk, Sentinel, ELK, LogRhythm, Sumo Logic.
• Bachelor's degree or equivalent work experience.
• US citizenship required due to client contracts.
• Certs: Splunk Admin, Sumo Logic Admin, MS Security Ops, AWS/Azure/GCP Architect.

🎁 Benefits

• Flexible work model: work from home or office.
• Paid parental leave, flexible time off, and training reimbursement.
• Digital mental health and wellbeing support.
• Comprehensive health insurance options.
• Employee resource groups and in-person/virtual events.