Security Engineer - Detection & Analytics
ExternalPrepare for this interview
EliteAI-generated questions, company research, and talking points tailored to this role
Responsibilities
- Build, tune, and maintain custom threat detection rules and alerts in Splunk Enterprise Security in partnership with Security Operations
- Develop and support Splunk dashboards and applications that enable threat hunting, risk remediation tracking, and security operations monitoring
- Integrate detections with SOAR platforms in partnership with Security Operations to support security automation and response workflows
- Analyze, parse, normalize, and enrich security data to support reliable detection, reporting, and analytics
- Design and implement automated data ingestion pipelines using agents, syslog, APIs, and database connectors to onboard new log sources
- Partner with Infrastructure, Application, and Security teams to expand logging coverage and improve security visibility across on‑prem and cloud environments
- Operate and optimize the Splunk Enterprise Security platform, ensuring stable ingestion, high availability, and efficient performance
- Ensure consistent agent deployment and monitoring coverage across a large and diverse estate of endpoints, servers, and cloud workloads
- What's REQUIRED
- We're seeking an experienced Splunk professional with strong security domain knowledge and a passion for building robust data analytics solutions at enterprise scale.
- 5+ years of experience working in technology roles, including 3+ years of hands‑on experience with Splunk Enterprise, covering administration, SPL development, data onboarding, and alerting
- Experience developing and tuning correlation searches, alerts, and dashboards in Splunk ES
- Strong knowledge of log formats, parsing techniques, regular expressions, and data normalization concepts
- Proficiency in relevant scripting or data languages (e.g., Python, Perl, PowerShell, SQL)
- Solid understanding of cybersecurity principles, threat detection methodologies, and security operations workflows
- Broad technical knowledge across networks, operating systems, applications, and SaaS platforms
- Commitment to the highest ethical standards and the ability to handle sensitive security information with discretion
- We take care of our people
- We invest in our people, their careers, their health, and their well-being. When you work here, we provide:
- Sports card
- Private life insurance
- Private medical and dental care, with vision allowance
- Private pension scheme
- Volunteer opportunities
- Support for employee-led affinity groups representing women, people of color and the LGBT+ community
- Business travel accident insurance
- Employee assistance program
- Educational assistance reimbursement
- About point72
Benefits
Additional Information
Splunk Security Engineer - Detection & Analytics A Career with Point72's Technology Team As Point72 reimagines the future of investing, our Technology group is constantly improving our company's IT infrastructure, positioning us at the forefront of a rapidly evolving technology landscape. We're a team of experts experimenting, discovering new ways to harness the power of open source solutions, and embracing enterprise agile methodology. We encourage professional development to ensure you bring innovative ideas to our products while satisfying your own intellectual curiosity.
Your Match
How well this role fits your profile.
Company Intel
What employees say
Worked at point72? Share your experience