Splunk SIEM Engineer

Anticipated Contract End Date: November 30 2026
Work set up: Hybrid (3 days per week in office)
Clearance required: BPSS (Contractor must be eligible)

Our client in the Information Technology and Services industry is looking for a Splunk SIEM Engineer to design develop and enhance security software solutions that provide business platform and technology capabilities for customers and colleagues. This role focuses on administering and optimizing Splunk Enterprise Security Microsoft Sentinel and supporting modern Security Operations by developing SIEM use cases managing data pipelines automating security workflows and strengthening enterprise cyber defense capabilities.

What you will do:

• Design develop and improve SIEM solutions that support enterprise security operations.
• Administer manage and maintain Splunk Enterprise and Splunk Enterprise Security environments.
• Develop SIEM use cases correlation searches and detection rules.
• Build and maintain Splunk data models to support advanced analytics and security monitoring.
• Configure and support Splunk Cloud environments.
• Administer and maintain Microsoft Sentinel security monitoring capabilities.
• Manage log ingestion routing parsing normalization and transformation using Splunk Enterprise and Cribl Stream.
• Develop automation workflows and security playbooks using SOAR technologies.
• Analyze security events and support threat detection and incident response activities.
• Troubleshoot security monitoring network and infrastructure issues.
• Create technical documentation operational procedures and runbooks.
• Develop automation scripts and integrations using Python PowerShell SPL KQL and SQL.
• Support CI/CD pipelines using tools such as GitLab and Jenkins.
• Collaborate with security infrastructure and engineering teams to improve monitoring capabilities.
• Support cloud security monitoring across AWS and Azure environments.
• Ensure security monitoring solutions align with governance compliance and regulatory requirements.

Qualifications :

• Bachelors degree or equivalent professional experience.
• Proven experience administering and developing Splunk Enterprise environments.
• Strong expertise with Splunk Enterprise Security (SIEM) including administration management maintenance and correlation search development.
• Experience designing and managing Splunk data models.
• Hands-on experience with Splunk Cloud.
• Experience administering Microsoft Sentinel.
• Strong understanding of SIEM architecture data models correlation rules and administrative functions.
• Experience working in large enterprise Security Operations environments supporting 10000 endpoints.
• Hands-on experience managing log ingestion routing parsing normalization and transformation using Cribl Stream or similar technologies.
• Experience developing SOAR playbooks and automated incident response workflows.
• Solid understanding of network architecture firewalls proxies common attack vectors and security troubleshooting.
• Strong technical communication and documentation skills including the creation of runbooks and operational procedures.
• Proficiency with Python PowerShell KQL SPL and SQL for automation and analytics.
• Experience with CI/CD tools such as GitLab Jenkins or similar platforms.
• Knowledge of AWS and Azure cloud security concepts and modern infrastructure.
• Experience with EDR UBA CASB CSPM vulnerability assessment tools and threat intelligence platforms is preferred.
• Familiarity with Infrastructure as Code tools such as Chef and Ansible is desirable.
• Knowledge of compliance frameworks including SOX PCI-DSS and GDPR is advantageous.
• Professional security certifications such as CISSP GCIH GCFA Splunk Certified Architect or Microsoft Sentinel Ninja are highly desirable.
• Eligibility to obtain BPSS clearance is required.

Additional Information :

Please submit a CV/resume (mandatory) along with your application.

All your information will be kept confidential according to EEO guidelines.

Candidates must be legally authorized to live and work in the country where the position is based without requiring employer sponsorship.

HelloKindred is committed to fair transparent and inclusive hiring practices. We assess candidates based on skills experience and role-related requirements.

We appreciate your interest in this opportunity. While we review every application carefully only candidates selected for an interview will be contacted.

HelloKindred is an equal opportunity employer. We welcome applicants of all backgrounds and do not discriminate on the basis of race colour religion sex gender identity or expression sexual orientation age national origin disability veteran status or any other protected characteristic under applicable law.

Remote Work :

No

Employment Type :

Full-time

Experience: years
Vacancy: 1