2

Remote Splunk Admin Jobs in Florida (NOW HIRING)

Remote Splunk Admin information

What is the difference between Remote Splunk Admin vs Remote Security Analyst?

AspectRemote Splunk AdminRemote Security Analyst
Required CredentialsSplunk certifications, IT experienceSecurity certifications (CISSP, Security+), IT background
Work EnvironmentIT operations, data management teamsCybersecurity teams, incident response
Industry UsageIT, telecommunications, financeFinance, healthcare, government
Common Search/ComparisonMonitoring Splunk dashboardsAnalyzing security threats

Remote Splunk Admins focus on managing and maintaining Splunk environments, ensuring data is properly indexed and dashboards are operational. Remote Security Analysts concentrate on identifying and mitigating security threats, often using tools like Splunk for threat detection. While both roles require IT knowledge, Splunk Admins specialize in data management, whereas Security Analysts focus on cybersecurity. Both roles are vital in tech-driven industries and often collaborate within IT and security teams.

What is a Remote Splunk Admin?

A Remote Splunk Admin is an IT professional who manages and maintains Splunk environments from a remote location. Their responsibilities typically include installing, configuring, and upgrading Splunk software, managing user access, monitoring system performance, and ensuring data security. They also develop and troubleshoot Splunk queries, dashboards, and alerts to help organizations gain insights from machine-generated data. This role is crucial for organizations leveraging Splunk for security, monitoring, and operational intelligence, and it allows for flexible work arrangements since tasks can be performed offsite.

What are some common challenges faced by remote Splunk Admins, and how can they be addressed?

Remote Splunk Admins often encounter challenges related to managing and securing distributed data sources, maintaining system performance, and ensuring effective communication with cross-functional teams. To address these challenges, it is important to implement robust monitoring practices, automate routine tasks where possible, and use secure remote access protocols. Regularly scheduled virtual meetings and clear documentation can also help foster collaboration with security, IT, and development teams, ensuring smooth operations and quick issue resolution.

What are the key skills and qualifications needed to thrive as a Remote Splunk Admin, and why are they important?

To thrive as a Remote Splunk Admin, you need expertise in Splunk deployment, configuration, and troubleshooting, often supported by a degree in IT or computer science and Splunk certifications like Splunk Certified Admin or Architect. Familiarity with scripting languages, system administration tools, and security information and event management (SIEM) systems is typically required. Strong analytical thinking, effective communication, and the ability to work independently are vital soft skills for this role. These skills ensure reliable system performance, effective data analysis, and seamless support of organizational security and operational objectives.
What cities in Florida are hiring for Remote Splunk Admin jobs? Cities in Florida with the most Remote Splunk Admin job openings:
Security Operations Center Cloud Engineer

Security Operations Center Cloud Engineer

Lakeview Loan Servicing

Coral Gables, FL • On-site, Remote

$165/hr

Full-time

Posted 28 days ago


Job description

Overview

The IT Security Team is looking for a seasoned professional to support a passionate, innovative, and results driven team. The Senior Security Operations Center (SOC) Cloud Engineer is responsible for monitoring, detecting, and responding to threats in AWS and Azure environments. This role focuses on integrating cloud logs into the SIEM, developing threat detections, and supporting incident response. The ideal candidate has strong technical expertise in cloud security and works closely with SOC analysts to enhance visibility and response across cloud workloads.

This role can be remote anywhere in the country.  The salary range for this role is $165,000 to $175,000, plus an annual bonus. However Lakeview considers several factors when extending an offer, including but not limited to, the roles and associated responsibilities, a candidate's work experience, education/training, location and key skills. 


Responsibilities
  • Collect, monitor, and analyze log sources from AWS and Azure, including CloudTrail, GuardDuty, Security Hub, Azure Activity Logs, Defender for Cloud, and other relevant telemetry sources.
  • Ensure AWS and Azure log sources are properly ingested into the SIEM (e.g., Splunk) and normalized for effective detection, alerting, and investigation.
  • Design and implement cloud threat detections for activities such as unauthorized access, privilege escalation, lateral movement, and data exfiltration in cloud environments.
  • Collaborate with SOC analysts to triage and respond to security alerts and incidents related to AWS and Azure platforms.
  • Proactively hunt for threats in AWS and Azure environments using SIEM, native cloud tools, and EDR platforms.
  • Develop, document, and automate cloud incident response procedures using SOAR platforms such as Splunk SOAR.
  • Work with infrastructure and DevOps teams to improve visibility and security posture across AWS and Azure.
  • Stay up to date on new and evolving threats and vulnerabilities targeting cloud platforms and recommend appropriate mitigations.
  • Mentor and support junior analysts on cloud detection and response techniques.

Qualifications
  • 8+ years of related experience in IT and Cyber Security.
  • 3+ years of direct experience securing AWS and Azure cloud environments.
  • 5+ years of experience working in an operational security environment (e.g., SOC, NOC).
  • Bachelor’s degree in Cybersecurity, Computer Science, or related field preferred.
  • One or more of the following certifications preferred: AWS Certified Security - Specialty, Azure Security Engineer Associate, GCIH, GCIA, GCFA.
  • Experience using SIEM platforms (preferably Splunk) for log ingestion, correlation, and threat detection in cloud environments.
  • Strong knowledge of AWS and Azure security services such as GuardDuty, Security Hub, IAM, VPC Flow Logs, Azure Activity Logs, Defender for Cloud, and Sentinel.
  • Familiarity with cloud IAM, network configurations, encryption, and resource monitoring in AWS and Azure.
  • Hands-on experience with endpoint protection platforms, IDS/IPS, and firewalls in hybrid and cloud networks.
  • Scripting skills (e.g., Python, PowerShell, Bash) for automating detections, investigations, or response actions.
  • Deep understanding of network protocols such as TCP/IP, HTTP/S, and DNS as they relate to cloud services.
  • Detail-oriented with strong analytical skills and the ability to troubleshoot complex security issues.
  • Experience with cloud forensic techniques and incident response is a strong plus.
  • Exposure to container security, Infrastructure-as-Code (IaC), and CI/CD security best practices in cloud environments is a plus.

Knowledge and Skills Required:

  • Strong problem-solving and analytical skills with attention to detail.
  • Ability to work independently and collaboratively in a fast-paced environment.
  • Self-starter with strong interpersonal, written and verbal communication skills and the ability to interact with technical and non-technical stakeholders.

Certifications

  • Splunk Enterprise Certified Admin, Splunk Enterprise Certified Architect OR Splunk Cloud Certified Admin, Splunk SOAR Certified Automation Developer preferred
Location & Compensation
  • The hourly rate for this role is $165-175K depending on the individual’s experience
  • Role can be 100% fully remote depending on geographic location
Physical Demands and Work Environment

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is regularly required to sit and use hands to handle, touch or feel objects, tools, or controls.  The employee frequently is required to talk and hear.  The noise level in the work environment is usually moderate.  The employee is occasionally required to stand; walk; reach with hands and arms.  The employee is rarely required to stoop, kneel, crouch, or crawl.  The employee must regularly lift and/or move up to 10 pounds.  Specific vision abilities required by this job include close vision, color vision, and the ability to adjust focus.

EEOC

Lakeview is an Equal Employment Opportunity employer.  All aspects of consideration for employment and employment with the Company are governed on the basis of merit, competence and qualifications without regard to race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, or any other category protected by federal, state, or local law.

Qualifications:
  • 8+ years of related experience in IT and Cyber Security.
  • 3+ years of direct experience securing AWS and Azure cloud environments.
  • 5+ years of experience working in an operational security environment (e.g., SOC, NOC).
  • Bachelor’s degree in Cybersecurity, Computer Science, or related field preferred.
  • One or more of the following certifications preferred: AWS Certified Security - Specialty, Azure Security Engineer Associate, GCIH, GCIA, GCFA.
  • Experience using SIEM platforms (preferably Splunk) for log ingestion, correlation, and threat detection in cloud environments.
  • Strong knowledge of AWS and Azure security services such as GuardDuty, Security Hub, IAM, VPC Flow Logs, Azure Activity Logs, Defender for Cloud, and Sentinel.
  • Familiarity with cloud IAM, network configurations, encryption, and resource monitoring in AWS and Azure.
  • Hands-on experience with endpoint protection platforms, IDS/IPS, and firewalls in hybrid and cloud networks.
  • Scripting skills (e.g., Python, PowerShell, Bash) for automating detections, investigations, or response actions.
  • Deep understanding of network protocols such as TCP/IP, HTTP/S, and DNS as they relate to cloud services.
  • Detail-oriented with strong analytical skills and the ability to troubleshoot complex security issues.
  • Experience with cloud forensic techniques and incident response is a strong plus.
  • Exposure to container security, Infrastructure-as-Code (IaC), and CI/CD security best practices in cloud environments is a plus.

Knowledge and Skills Required:

  • Strong problem-solving and analytical skills with attention to detail.
  • Ability to work independently and collaboratively in a fast-paced environment.
  • Self-starter with strong interpersonal, written and verbal communication skills and the ability to interact with technical and non-technical stakeholders.

Certifications

  • Splunk Enterprise Certified Admin, Splunk Enterprise Certified Architect OR Splunk Cloud Certified Admin, Splunk SOAR Certified Automation Developer preferred
Location & Compensation
  • The hourly rate for this role is $165-175K depending on the individual’s experience
  • Role can be 100% fully remote depending on geographic location
Physical Demands and Work Environment

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is regularly required to sit and use hands to handle, touch or feel objects, tools, or controls.  The employee frequently is required to talk and hear.  The noise level in the work environment is usually moderate.  The employee is occasionally required to stand; walk; reach with hands and arms.  The employee is rarely required to stoop, kneel, crouch, or crawl.  The employee must regularly lift and/or move up to 10 pounds.  Specific vision abilities required by this job include close vision, color vision, and the ability to adjust focus.

EEOC

Lakeview is an Equal Employment Opportunity employer.  All aspects of consideration for employment and employment with the Company are governed on the basis of merit, competence and qualifications without regard to race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, or any other category protected by federal, state, or local law.

Education:UNAVAILABLEEmployment Type: FULL_TIME