IT Security SIEM Engineer( Splunk- Locals to NYC​/NJ

IT Security SIEM Engineer (Splunk) - Locals to NYC/NJ

Location: NYC, NY

Duration: 12 Months

Scope of Work: The IT Security SIEM (Splunk) Engineer will provide overall engineering and administration in supporting a cloud‑based Splunk environment consisting of search heads, indexes, deployers, deployment servers, heavy/universal forwarders, and Splunk apps spanning security, performance, and operational roles. The engineer should be proficient with recognizing and onboarding new data sources into Splunk, analyzing the data for anomalies and trends, and building dashboards that highlight the key trends of the data.

• Design, develop, and maintain complex Splunk queries and dashboards intended for technical and executive audiences.
• Build dashboards, reports, alerts, and manage knowledge objects.
• Onboard new log sources to enhance monitoring, detection, and response.
• Collaborate with stakeholders to develop requirements and deliverables.
• Work self‑sufficiently on assigned tasks within a Linux environment.

• Good understanding and hands‑on experience designing business solutions using Splunk.
• High‑level experience with dashboards, reports, alerts, and managing knowledge objects.
• Knowledge of enterprise logging, including application, web, database, and security logging.
• Strong interpersonal, communication, and presentation skills.
• Advanced experience with Splunk data analytics, data visualization, and reporting capabilities.
• Ability to work self‑sufficiently on assigned tasks.
• Ability to design, develop, and maintain complex Splunk queries and dashboards.

• Knowledge of Incident Response Procedures.
• Knowledge of Packet Analysis.
• Knowledge of IDS/IPS solutions and various host‑based tools.
• Experience with Log Aggregation Tools.
• Knowledge of patterns in network and system activity via log correlation using Splunk and supplemental tools.
• Verbal and written communication ability.
• Splunk Certified (Enterprise Admin, Cloud Admin, Enterprise Architect).
• Relevant security certifications: CASP, GCIH, GCWN, GISF, GISP, GSSP, GICSP, SEI, CISSP, CSSLP, SSCP, CCNP, CCNP Security, CCIE Security, CEH, ECSP, MCSE.

Referrals increase your chances of interviewing at Innovee Consulting LLC by 2x.