Information Security Engineer II Splunk

Overview

The Opportunity

We are seeking a highly skilled Information Security Engineer II with a focus on detection rule writing and SIEM management (Splunk preferred). In this role, you'll design, develop, and maintain detection logic that supports incident response, threat monitoring, and compliance workflows. The Information Security Engineer II tackles moderately complex security engineering challenges within their domain. They maintain and enhance existing security controls while actively participating in the design and development of new solutions.

They proactively identify and address vulnerabilities or deficiencies within their domain, develop and implement robust controls to mitigate these risks, create detailed documentation, and implement mechanisms to ensure the effectiveness of solutions. The Information Security Engineer II is expected to work independently on moderately complex problems within their domain and provide guidance to junior team members to support their development.

They will regularly engage with external stakeholders and partners to support the development of effective solutions.

• Develop, optimize, and maintain detection rules and use cases for SIEM platforms (Splunk preferred) to identify security threats and suspicious activity.
• Manage, optimize, and tune SIEM alerts, dashboard, and correlation searches.
• Collaborate with security analysts and incident responders to refine detection logic and improve threat coverage.
• Analyze security logs and events to identify patterns, trends, and potential risks.
• Document detection rule logic, SIEM configurations, and incident response workflows.
• Participates in architectural discussions and contributes to the design of complex solutions.
• Proactively identifies and optimizes improvement in existing processes.
• Mentors junior team members, sharing knowledge and best practices.
• Cross-Functional collaboration with other teams to ensure successful solution delivery. Use/s the Mass General Brigham values to govern decisions, actions, and behaviors. These values guide how we get our work done:
  Patients, Affordability, Accountability & Service Commitment, Decisiveness, Innovation & Thoughtful Risk; and how we treat each other:
  Diversity & Inclusion, Integrity & Respect, Learning, Continuous Improvement & Personal Growth, Teamwork & Collaboration.
• Other duties and responsibilities as assigned

• Bachelor s or Associate s Degree or requisite experience.
• 3+ years of relevant experience.
• Relevant Certifications preferred.
• Experience with Splunk Enterprise Security (ES) or similar SIEM frameworks.
• Hands-on experience with SIEM platforms, EDR tools, firewalls, IDS/IPS, and log analysis
• Can this role consider and review experience in lieu of a degree? Yes

• Strong experience with SIEM platforms (Splunk preferred), including SPL writing, dashboard creation, correlation searches, and data models.
• Hands-on experience with SIEM platforms, EDR tools, and log analysis.
• Strong understanding of cybersecurity concepts within their domain.
• High proficiency with the tools and solutions supported by the team.
• Solid understanding of system architecture and design.
• Strong problem solving skills and analytical thinking to identify solutions to complex problems, and to optimize existing solutions.
• Excellent prioritization capabilities, with an aptitude for breaking down work into manageable parts, effectively assessing the priority and time required to complete each part.
• Excellent communication and teamwork skills to share knowledge, present ideas, and lead discussions.

• No direct reports; may provide guidance to less seasoned and new staff

• M-F Eastern Business Hours
• Hybrid Model includes weekly onsite in office
• Wednesdays in office are required weekly
• Weekly and monthly flexibility required for business needs, onsite meetings, stakeholder meetings and initiatives
• Remote workdays require stable, secure, quiet compliant work station

Mass General Brigham Incorporated is an Equal Opportunity Employer. By embracing diverse skills, perspectives and ideas, we choose to lead. All qualified applicants will receive consideration for employment without regard to race, color, religious creed, national origin, sex, age, gender identity, disability, sexual orientation, military service, genetic information, and/or other status protected under law. We will ensure that all individuals with a disability are provided a reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment.