SIEM Subject Matter Expert (Splunk)

The Splunk Enterprise Security Subject Matter Expert manages and optimizes a large-scale Splunk deployment, ensuring effective architecture and platform health for substantial log ingestion across numerous endpoints. This role enhances Security Operations Center (SOC) throughput through expert knowledge of Splunk and its integrations. The position involves developing correlation rules, onboarding log sources, and building SIEM-to-SOAR integrations for automated response.