Senior Cybersecurity Engineer (Splunk)

Job Title: Senior Cybersecurity Engineer (Splunk)

Location: Irving, TX / Jacksonville, FL

Employment Type: Full-time

Job Description:

Senior Cybersecurity Engineer (Splunk)

Must Have Technical/Functional Skills

• Strong hands-on experience with Splunk Enterprise and/or Splunk Enterprise Security.
• Experience in log onboarding, data ingestion validation, dashboards, alerts, correlation rules, and reporting.
• Ability to troubleshoot Splunk ingestion, indexing, alerting, and performance-related issues.
• Good understanding of cybersecurity monitoring, SIEM operations, security analytics, and control assurance.
• Experience collaborating with infrastructure, network, IAM, application, and security teams.
• Strong documentation, reporting, analytical, and stakeholder management skills.
• Experience supporting monitoring transition, separation, migration, or divestiture-related programs is preferred.

Roles & Responsibilities

Splunk Monitoring & Security Analytics

• Lead Splunk monitoring, log onboarding, and security analytics activities for the divestiture program.
• Configure and validate log ingestion, dashboards, alerts, correlation rules, and reporting.
• Develop and optimize monitoring capabilities to support security detection and operational visibility.

Monitoring Separation & Transition Support

• Support Splunk monitoring separation and transition for in-scope systems and business entities.
• Validate monitoring coverage and ensure required logs, alerts, dashboards, and reports are aligned to transition needs.
• Coordinate monitoring readiness activities to support secure divestiture execution.

Troubleshooting & Platform Support

• Troubleshoot data ingestion, indexing, alerting, correlation rule, reporting, and performance issues.
• Identify monitoring gaps and support remediation with relevant technical teams.
• Ensure Splunk monitoring remains reliable, accurate, and operationally effective.

Cross-Functional Collaboration

• Collaborate with infrastructure, network, IAM, application, and security teams for log onboarding and monitoring validation.
• Work with stakeholders to align Splunk monitoring requirements with program objectives and security controls.
• Provide technical guidance on Splunk monitoring best practices and operational procedures.

Documentation, Reporting & Audit Readiness

• Develop operational documentation, runbooks, configuration details, support procedures, and monitor reports.
• Prepare audit evidence, monitoring reports, and control assurance documentation.
• Support compliance and audit readiness through accurate reporting and documented monitoring coverage.