Splunk Data Models Cybersecurity Jobs

1 job found

Today

Deloitte Baltimore, MD

Baltimore, MD

Today

$103k - $189k/yr Full time Engineer Identity and Access Management Incident Response

Join Deloitte’s Cyber team to architect and engineer Splunk capabilities for security monitoring, enterprise logging, and operational analytics.

Design, implement, and optimize Splunk architectures for security monitoring, log management, and operational analytics
Build and maintain Splunk dashboards, alerts, reports, searches, and data models aligned to client and business requirements
Integrate log and telemetry sources into Splunk, including infrastructure, cloud, application, and security technologies
Support development of threat detection, incident response, compliance monitoring, and operational visibility use cases
Create and maintain architecture diagrams, technical documentation, implementation standards, and administration procedures

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related technical field
Active Top-Secret Clearance
Ability to work onsite up to 5 days a week
Implementing and supporting Splunk Enterprise or Splunk Cloud
Develop Splunk dashboards, reports, alerts, and saved searches
Onboard and normalize log sources from infrastructure, applications, cloud platforms, or security tools
SIEM concepts with security monitoring or threat detection use case experience
Working knowledge of TCP/IP, networking protocols, and system log analysis
Experience with Splunk Search Processing Language (SPL), Splunk data models, and role-based access controls
One or more certifications: Splunk Core Certified Power User, Splunk Enterprise Certified Admin, or Splunk Enterprise Security
Ability to travel 20% on average based on client needs and sectors
Legally authorized to work in the United States without employer sponsorship, now or in the future

1+ year supporting Splunk in AWS, Microsoft Azure, or GCP
5+ years of Splunk Enterprise Security, Splunk SOAR, or security orchestration workflow experience
5+ years integrating Splunk with endpoint, identity, firewall, or cloud security tools
1+ year experience with Python, automation scripting, or infrastructure as code tools
Experience supporting regulated or federal environments

Deloitte’s Deloitte Cyber team focuses on the unique challenges and opportunities businesses face in cybersecurity
Cyber defense and resilience offering supports managing and protecting dynamic attack surfaces, enabling rapid crisis and cyber incident response for readiness, response, and recovery

Security Engineer III (Splunk Architect) role on Deloitte’s Cyber team
Designs, implements, and optimizes Splunk solutions for security monitoring, visibility, and enterprise logging strategies
Combines hands-on Splunk engineering with architecture responsibilities to support threat detection and operational resilience

New Splunk Data Models Cybersecurity Jobs, daily.