Jobs Companies Truezerotech Splunk Engineer-Core Certified Consultant/ ES Accreditation Required (R-00101)

Sobre este puesto de Splunk Engineer-Core Certified Consultant/ ES Accreditation Required (R-00101) en Truezerotech

Truezerotech · 100% Remote
True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.

Job Responsibilities

  • Implement RBA: Develop and implement RBA strategies within Splunk ES to reduce alert noise and focus on high-fidelity alerts.
  • Develop RBA components: Build and implement actionable alerts, workflow actions, risk incident rules, and risk scores.
  • Create dashboards and reports: Design custom dashboards to visualize risk scores and provide context for analysts.
  • Correlate data: Use Splunk's capabilities to correlate disparate events to identify patterns of risky behavior.
  • Build custom solutions: Develop custom machine learning (ML) models to augment alerting and create automated workflows to improve efficiency.
  • Content DevelopmentDevelop advanced security content, including dashboards, reports, and alerts, to highlight risk details, health analysis, and risk suppression specific to RBA environments.
  • Data: Collaborate with application and system owners to onboard new data sources (e.g., from Windows, Linux, cloud services like AWS/Azure) and ensure proper parsing and enrichment for effective analysis within RBA.
  • Correlate various data sources, such as logs from operating systems, applications, and cloud providers, into Splunk to feed RBA models.
  • Preferred/Required Qualifications

  • Core Certified Consultant is a requirement
  • Technical Expertise: Deep technical expertise in Splunk administration, architecture, and Search Processing Language (SPL).
  • Security Knowledge: Strong understanding of security operations, threat detection, incident response, and security frameworks (e.g., NIST RMF).
  • Preferred relevant Splunk certifications are a plus such as:
  • Splunk Core Certified Power User
  • Splunk Enterprise Certified Admin
  • Splunk Enterprise Certified Architect
  • Splunk ES
  • Scripting: Proficiency in scripting languages like Python, PowerShell, or Bash for automation and data analysis.
  • Willingness to collaborate within an agile environment

  • We’re actively searching for talented security and technology practitioners who are ready to experience the True Zero difference. As a True Zero team member, you'll enjoy:

    - Competitive salary, paid twice per month
    - Best in class medical coverage
    - 100% of medical premiums covered by True Zero
    - Company wide new business incentive programs
    - Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)
    - 3 weeks of PTO starting + 11 Paid Holidays Annually
    - 401k Program with 100% company match on the first 4%
    - Monthly reimbursement of Cell Phone and Home Internet costs
    - Paternity/Maternity Leave
    - Investment in training and certifications to broaden and deepen your technical skills
    ¿Listo para postularte en Truezerotech?
    Postúlate en Truezerotech

    Empleos similares

    Truezerotech
    Security Automation Workflow Developer (SOAR/GRC) (R-00180)
    Truezerotech
    ⚡ Postúlate pronto 100% Remote · restringido por ubicación
    ● Nuevo 👁 Visto ✓ Postulado hace 23h
    Truezerotech
    Security Automation Engineer (SOAR/GRC) (R-00166)
    Truezerotech
    ⚡ Postúlate pronto 100% Remote · restringido por ubicación
    ● Nuevo 👁 Visto ✓ Postulado hace 23h
    Truezerotech
    IDIQ Program Manager (R-00182)
    Truezerotech
    ⚡ Postúlate pronto 100% Remote · restringido por ubicación
    ● Nuevo 👁 Visto ✓ Postulado hace 2d
    Truezerotech
    RMF Process Specialist (R-00181)
    Truezerotech
    ⚡ Postúlate pronto 100% Remote · restringido por ubicación
    ● Nuevo 👁 Visto ✓ Postulado hace 2sem
    Truezerotech
    RMF Process Lead (R-00177)
    Truezerotech
    ⚡ Postúlate pronto 100% Remote · restringido por ubicación
    ● Nuevo 👁 Visto ✓ Postulado hace 2sem
    Truezerotech
    Senior Database Specialist Lead (R-00178)
    Truezerotech
    ⚡ Postúlate pronto 100% Remote · restringido por ubicación
    ● Nuevo 👁 Visto ✓ Postulado hace 2sem
    Truezerotech
    Quality & Compliance Administrator PMO (R-00174)
    Truezerotech
    ⚡ Postúlate pronto 100% Remote · restringido por ubicación
    ● Nuevo 👁 Visto ✓ Postulado hace 2sem
    Truezerotech
    SIEM Analyst II (R-00173)
    Truezerotech
    ⚡ Postúlate pronto Northern, VA Presencial
    ● Nuevo 👁 Visto ✓ Postulado hace 3sem
    Truezerotech
    Cyber Security Analyst-Senior Level (R-00172)
    Truezerotech
    ⚡ Postúlate pronto Northern, VA Presencial
    ● Nuevo 👁 Visto ✓ Postulado hace 3sem

    Regístrate para recibir sugerencias adaptadas a los empleos que abres y las búsquedas que guardas.

    Más empleos en Truezerotech

    Ver todos los empleos en Truezerotech →

    Postúlate ahora
    🤖

    Un momento — para

    JobsRadar se creó para personas reales que están pasando un mal momento en su búsqueda de empleo — no para solicitudes automatizadas. Estás haciendo clic demasiado rápido y ahora estás bloqueado temporalmente.

    Vuelve más tarde. Si de verdad estás buscando empleo, cuentas con nosotros — solo compórtate como una persona.

    Catch your next role the second it’s posted.

    Create a free account and we’ll watch the boards for you — the instant a job matches your search, it lands in your inbox or Telegram. No digging, no refreshing.

    Create free account

    Free forever · takes 30 seconds · already have one?

    Toma ventaja en tu búsqueda de empleo.

    Únete a nuestro canal de Telegram para lo que te ayuda a conseguir el puesto — referencias salariales, el pulso semanal del mercado y avisos de nuevas funciones. Sin spam, solo señal.

    Únete al canal — es gratis