Splunk Detection Engineer

Who you are: A cybersecurity analyst with 5+ years of experience (minimum 3+ years in a SOC environment) Experienced in incident response, triage, threat detection, and alert tuning Advanced experience with Splunk ES/Core and writing complex SPL queries is a must Familiar with email and endpoint security platforms like Proofpoint TAP/TRAP and Crowd

Strike Falcon Comfortable with shift work A strong communicator who can work collaboratively with cross-functional teams Interested in career growth in cybersecurity It would be awesome if you had: Hands-on experience with cloud security platforms like Wiz, Zscaler and Proofpoint Email GW(would be helpful) Relevant certifications such as CompTIA Sec+, Net+, OSCP, or CySA+ Scripting experience (Python, PowerShell) for automation and enrichment Experience using AI-tools such as Claude Code, Codex, Cursor, and LLM’s to solve security problems.

Perform advanced SOC analysis, including triage, incident reporting, and threat hunting Help us build security detection content within Splunk Enterprise Security Work across ticketing and orchestration platforms to remediate alerts and improve detection Support continuous improvement by tuning alerts, managing logs, and automating repetitive tasks