Recently postedTechnology

SIEM/Splunk Engineer

Synapse Business SystemsWashington, DC🇺🇸United States

Why this role stands out

Accelerate your career at Synapse Business Systems by leading high-impact security architecture migrations in a collaborative, hybrid environment that values both technical innovation and professional growth. This role is perfect for a detail-oriented SIEM expert who thrives on architecting robust data pipelines and wants to master both Splunk and Elastic ecosystems. Apply today to join a forward-thinking team where your expertise will directly shape the future of enterprise security.

Quick overview

SeniorityMid Senior

Work modeHybrid

LocationWashington, DC, United States

PythonPowerShellBashSQLAWSAzureSplunk

Job description

Key Responsibilities

Platform Administration: Maintain, monitor, and troubleshoot enterprise Splunk Enterprise and Splunk ES environments.
Migration Strategy: Lead and support the orchestration and transition of data pipelines, searches, and use cases from Splunk over to modern architectures like the Elastic Stack (Elastic Security).
Data Ingestion: Onboard enterprise log sources across syslog, Windows Event Collection (WEC), cloud environments (AWS/Azure), and APIs. Ensure data mapping aligns with Splunk CIM and Elastic Common Schema (ECS).
Content Development: Build and optimize complex SPL (Search Processing Language) queries, dashboards, alerts, and reporting mechanisms.

Required & Preferred Qualifications

Experience: Minimum 5 years of IT/cybersecurity experience, with 3+ years specifically in hands-on enterprise SIEM administration.
Technical Skills: Strong proficiency with Linux command-line, scripting (Python, Bash, or PowerShell), and SQL querying.
Certifications: Splunk Core Certified Administrator/Power User, Security+, or equivalent certifications are highly preferred