Senior Cybersecurity Engineer

About the role

This position leads Splunk monitoring, log onboarding, security analytics, and operational readiness activities for a divestiture program. The role focuses on configuring and validating dashboards, alerts, correlation rules, reporting, and audit evidence to support secure monitoring separation and transition.

Responsibilities

• Lead Splunk monitoring, log onboarding, and security analytics activities for the divestiture program.
• Configure and validate log ingestion, dashboards, alerts, correlation rules, and reporting.
• Develop and optimize monitoring capabilities to support security detection and operational visibility.
• Support Splunk monitoring separation and transition for in-scope systems and business entities.
• Validate monitoring coverage and ensure required logs, alerts, dashboards, and reports are aligned to transition needs.
• Coordinate monitoring readiness activities to support secure divestiture execution.
• Troubleshoot data ingestion, indexing, alerting, correlation rule, reporting, and performance issues.
• Identify monitoring gaps and support remediation with relevant technical teams.
• Ensure Splunk monitoring remains reliable, accurate, and operationally effective.
• Collaborate with infrastructure, network, IAM, application, and security teams for log onboarding and monitoring validation.
• Work with stakeholders to align Splunk monitoring requirements with program objectives and security controls.
• Provide technical guidance on Splunk monitoring best practices and operational procedures.
• Develop operational documentation, runbooks, configuration details, support procedures, and monitor reports.
• Prepare audit evidence, monitoring reports, and control assurance documentation.
• Support compliance and audit readiness through accurate reporting and documented monitoring coverage.

Requirements

• Strong hands-on experience with Splunk Enterprise and/or Splunk Enterprise Security.
• Experience in log onboarding, data ingestion validation, dashboards, alerts, correlation rules, and reporting.
• Ability to troubleshoot Splunk ingestion, indexing, alerting, and performance-related issues.
• Good understanding of cybersecurity monitoring, SIEM operations, security analytics, and control assurance.
• Experience collaborating with infrastructure, network, IAM, application, and security teams.
• Strong documentation, reporting, analytical, and stakeholder management skills.
• Experience supporting monitoring transition, separation, migration, or divestiture-related programs is preferred.

Pay

$80,000–$110,000 a year