RemoteLeaf Logo
Log in Sign up

Splunk Engineer-Core Certified Consultant/ ES Accreditation Required (R-00101)

1 month, 2 weeks ago
Anywhere
Full-time
Senior
Security Engineer
Data Science and Analytics
Agile AWS Azure Bash Linux Machine Learning PowerShell Python Splunk
Apply Now
True Zero Technologies

True Zero Technologies

True Zero Technologies specializes in cybersecurity programs and software solutions, focusing on proactive defense and IT engineering services.

Internet Software & Services
11-50
Founded 2016
View All Jobs 10

Description

  • Develop and implement risk-based alerting (RBA) strategies within Splunk ES to reduce alert noise and prioritize high-fidelity alerts.
  • Build actionable alerts, workflow actions, risk incident rules, and risk scores for security operations.
  • Design custom dashboards and reports to visualize risk scores and provide analyst context.
  • Correlate disparate events and data sources to identify patterns of risky behavior.
  • Develop custom machine learning models and automated workflows to improve alerting and operational efficiency.
  • Create advanced security content, including dashboards, reports, alerts, risk details, health analysis, and risk suppression for RBA environments.
  • Onboard new data sources in collaboration with application and system owners.
  • Ensure proper parsing and enrichment of Windows, Linux, and cloud data for effective analysis in Splunk.
  • Correlate logs from operating systems, applications, and cloud providers into Splunk to support RBA models.

Requirements

  • Splunk Core Certified Consultant certification is required.
  • Deep technical expertise in Splunk administration, architecture, and Search Processing Language (SPL).
  • Strong understanding of security operations, threat detection, incident response, and security frameworks such as NIST RMF.
  • Proficiency in scripting languages such as Python, PowerShell, or Bash for automation and data analysis.
  • Preferred Splunk certifications include Splunk Core Certified Power User, Splunk Enterprise Certified Admin, Splunk Enterprise Certified Architect, and Splunk ES.
  • Willingness to collaborate within an agile environment.
  • Experience working with Windows, Linux, and cloud services such as AWS and Azure is preferred.
  • Experience onboarding and parsing security-relevant data sources is preferred.

Benefits

  • Competitive salary, paid twice per month.
  • Best-in-class medical coverage with 100% of medical premiums covered by True Zero.
  • Company-wide new business incentive programs.
  • Contribution incentives for white papers, blog posts, and internal webinars.
  • 3 weeks of PTO starting plus 11 paid holidays annually.
  • 401(k) program with 100% company match on the first 4%.
  • Monthly reimbursement for cell phone and home internet costs.
  • Paternity and maternity leave.
  • Investment in training and certifications to broaden and deepen technical skills.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

INflow Federal

DevSecOps Engineer

INflow Federal 51-250 Aerospace & Defense

INflow Federal is seeking a fully remote DevSecOps Engineer to support an enterprise case management solution for Department of Defense mission partners by securing and automating cloud-based CI/CD and infrastructure operations in AWS GovCloud.

United States Full-time Senior DevOps Engineer Security Engineer
Agile AWS Bash CI/CD CloudFormation Docker ELK Stack Git GitLab CI Helm Jenkins Kubernetes PowerShell Prometheus Python Terraform
1 hour, 36 minutes ago
Klaviyo

Lead Security Engineer, Enterprise Security

Klaviyo 1K-5K IT Services

Klaviyo is hiring a Lead Security Engineer to secure its corporate systems and platforms across SaaS, identity, endpoints, Zero Trust networking, and perimeter security.

United States Full-time Lead Security Engineer
$175k-$263k
AWS Azure Cloudflare CrowdStrike GCP OAuth Secrets Management Terraform Vercel
2 hours, 16 minutes ago
Anduril Industries

Senior Detection and Response Engineer

Anduril Industries 1K-5K Aerospace & Defense

Anduril Industries is hiring a Senior Detection and Response Engineer to build and operate defensive security controls that protect the infrastructure supporting its defense technology products.

United States Full-time Senior Security Engineer
$166k-$220k
AWS Azure CI/CD CloudFormation Docker GitHub Go Kubernetes Network Security Python Rust SQL Terraform
3 hours, 57 minutes ago
Klaviyo

Lead Security Engineer, Enterprise Security

Klaviyo 1K-5K IT Services

Klaviyo is hiring a Lead Security Engineer to secure its corporate systems and platforms across SaaS, identity, endpoints, Zero Trust networking, and perimeter defenses in a hands-on technical leadership role.

United States Full-time Lead Security Engineer
$175k-$263k
AWS Azure Cloudflare CrowdStrike GCP OAuth OpenID Connect Secrets Management Terraform Vercel
4 hours, 30 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers