Security Platform Engineer

📋 Description

• Engineer and operate enterprise-scale security platforms (Splunk ES, Splunk Enterprise) for SOC
• Deploy and manage Cribl Stream for log routing, filtering, masking, and enrichment.
• Develop data onboarding pipelines from security, infrastructure, cloud, and enterprise sources.
• Configure log ingestion, CIM mapping, field extraction, normalization, and data models.
• Optimize searches, dashboards, and monitoring content for performance and scalability.
• Build detection use cases, alerts, and security monitoring capabilities.

🎯 Requirements

• 5+ years with Splunk Enterprise; strong admin and support experience.
• Experience with Splunk Enterprise Security and security monitoring.
• Hands-on Cribl Stream administration and data pipelines.
• Knowledge of log onboarding, parsing, CIM, and data modeling.
• Proficiency in SPL; experience with index management, forwarders, deployment servers, search heads
• REST APIs, JSON, Python/PowerShell/Bash scripting; Linux troubleshooting.

🎁 Benefits

• Competitive compensation of $46–$60 per hour, based on qualifications and location.
• W2 employment structure; healthcare options (medical, dental, vision).
• Major holidays and paid sick leave; remote work opportunity.
• Exposure to enterprise SIEM technologies and security automation.
• Opportunity to develop expertise across Splunk, Cribl, and SOAR platforms.