Splunk Engineer Enterprise Security; Remote

Splunk Engineer with Enterprise Security (Remote)

This role is for a Splunk Engineer with Enterprise Security, offering a 6-month remote contract at market rate. Requires 8+ years of Splunk ES experience, collaboration with Security Analysts, scripting skills, and relevant certifications.

Location:

Remote (United States)

Employment Type:

Corp-to-Corp (C2C) / W2 (US Citizen or Green Card only)

Contract Length: 6 months with potential extension.

We are seeking an experienced Splunk Engineer specializing in Splunk Enterprise Security (ES) to administer, manage, and optimize our Splunk operations. The ideal candidate will be responsible for configuring, monitoring, and maintaining Splunk ES to support our security operations, working closely with Security Analysts to ensure effective threat detection and response.

• Configure, customize, and maintain Splunk Enterprise Security to meet organizational security monitoring needs.
• Monitor and resolve data breaches and manage alerts.
• Develop, tune, and monitor security alerts, correlation searches, and dashboards within Splunk ES.
• Implement and manage use cases, data models, and risk-based alerting frameworks.
• Work closely with Security Analysts to triage, investigate, and respond to security alerts generated by Splunk ES.
• Provide timely and accurate data from Splunk to support incident investigation and forensic analysis.
• Assist in developing and refining detection rules, reports, and visualizations to improve analyst efficiency.

• 8+ years of experience in Splunk Enterprise Security.
• Technical Splunk expertise and security operations collaboration to ensure effective threat detection and response.
• Proven experience as a Splunk security engineer with hands‑on expertise in Splunk Enterprise Security.
• Strong ability to configure, run, and monitor alerts within Splunk ES.
• Experience working collaboratively with Security Analysts in a SOC or similar environment.
• Familiarity with security data sources, log formats, and SIEM integration.
• Splunk certifications (e.g., Splunk Certified Admin, Splunk Enterprise Security Certified Admin) are a plus.
• Knowledge of security frameworks, compliance requirements, and threat intelligence integration.
• Scripting skills (Python, Bash, etc.) for automation and customization.
• Experience in large‑scale or multi‑site Splunk deployments.

Employment Type:

C2C, or W2 (USC or GC only). Contracting Period: 6 months.

Job Location:

Remote. Contract Rate/Salary:
Market Rate. Interview Process:
Phone/Video Interview(s).