Splunk Dashboard Engineer

Roles and Responsibilities Design, develop, and maintain Splunk dashboards supporting SOC monitoring, incident detection, investigation, and response. Create interactive dashboards and visualizations for key security metrics, including: Incident volume and severity Mean Time to Detect (MTTD) Mean Time to Respond/Resolve (MTTR) Alert fidelity and false positive trends Develop and optimize Splunk searches, reports, alerts, and dashboard panels to identify suspicious activity and notable security events. Collaborate with Detection Engineers, Incident Responders, and SOC Analysts to understand operational requirements and threat use cases. Build dashboards that enable efficient investigation workflows and rapid pivoting from visualization to incident analysis. Improve dashboard performance by optimizing SPL queries, searches, and data models. Transform complex and unstructured security data into meaningful visual insights. Document dashboard logic, search methodologies, metric definitions, and reporting standards. Ensure dashboards support operational consistency and align with SOC best practices. Required Qualifications Hands-on experience developing dashboards, reports, and visualizations in Splunk. Experience working in a Security Operations Center (SOC) or cybersecurity environment. Strong experience with Splunk Search Processing Language (SPL). Experience analyzing security-related data sources, including: Authentication logs Endpoint telemetry Network logs Application security logs Ability to convert complex security data into clear, actionable dashboards and reports. Experience collaborating with SOC Analysts, Incident Responders, and Detection Engineers. Strong analytical, troubleshooting, and problem-solving skills. Excellent communication and documentation abilities.