Splunk Data Engineer

Develop, configure, and maintain Splunk dashboards, reports, alerts, and correlation searches to support security monitoring and operational visibility. Build and optimize log ingestion pipelines, ensuring accurate parsing, enrichment, and normalization of log data across multiple sources. Create and maintain SOPs, runbooks, triage workflows, and incident remediation procedures for Splunk-based monitoring operations. Perform alert triage, event investigation, and root-cause analysis, leveraging Splunk queries and correlation logic. Continuously tune searches, dashboards, and alerts to improve detection quality and reduce noise/false positives. Partner with Security Operations, IT, Network, and Application teams to expand log coverage and improve monitoring use cases. Monitor Splunk platform health, performance, indexing, storage, and data ingestion to ensure high availability and reliability.