Role requires on call rotation, 24x7 follow the sun model, one week per month 

Remote or Hybrid schedule available 

Meet The Team 

This role will be part of the Splunk Security Center of Excellence team. You’ll get to collaborate with a passionate group of engineers and security professionals who are focused on continuously improving how we detect, respond to, and automate security operations. The team is deeply invested in improving the internal customer experience, building smarter automation, and increasing the resilience of the services that protect the organization. If you enjoy diving into complex technical challenges, optimizing systems, and building solutions that make security operations more efficient, this team provides the environment to do it. We’re a group that takes security seriously but also believes great work happens in a supportive and collaborative environment. We enjoy solving tough problems together, sharing knowledge, and having a good laugh along the way. 

Your Impact 

You’ll be responsible for developing, fixing, and debugging internal deployments of core Splunk technologies, including Splunk Cloud Platform and SOAR. Your work will directly impact the reliability and effectiveness of the systems that power our security operations. This is a hands-on opportunity to combine strong information security knowledge with software development principles to solve meaningful problems at scale. 

• Ensure the steady-state operations of the Splunk products used by Splunk's in-house Security Operations team 

• Work closely with the Splunk Global Security (SGS) teams to improve existing automation and search initiatives that deliver resilient solutions  

• Tap into your expertise of all things Splunk to address issues 

• Build and improve custom data onboarding scripts and add-ons for internal corporate tools and services 

• Analyze internal metrics and workflows to reduce false positives and accurately focus engineering efforts 

• Develop repeatable processes to build playbooks to efficiently resolve any incidents that arise 

• Serve as initial support for internal customers and maintain high availability of playbooks. 

• Implement validated security strategies related to our team’s Linux-based and AWS-based infrastructure, Python code, and containerized services 

Minimum Qualifications 

• Bachelor’s Degree + 6 years of related experience 

• Experience in Splunk and/or Splunk SOAR administration that supported cybersecurity or information technology teams 

• Experience in tool integrations, CI/CD and REST APIs as well as software development experience with Python, Golang, JavaScript, or similar 

• Experience with git and version control systems, like GitLab and/or GitHub 

• Experience in Security Operations, SIEM, Incident Response, and/or Threat Intelligence 

• Experience in Linux administration and Cloud Technologies, such as AWS 

Preferred Qualifications 

• Excellent communication skills, both verbal and written; able to explain intricate technical topics to varying groups