1

Splunk Engineer Jobs in California (NOW HIRING)

Core Java Developer with Splunk

Sunnyvale, CA · On-site

$60.75 - $78.50/hr

Java Developer with Splunk Location: Sunnyvale, CA Duration: Fulltime / Contract to hire Responsibilities: * Bachelor's Degree, a related technical or scientific field, or equivalent with 8 years of ...

Lead SRE Engineer

San Leandro, CA · On-site

$63 - $83.75/hr

Lead SRE Engineer San Leandro, CA 6 to 12+ Months Only USC & GC * Min 15+ years of experience in ... Hands-on Splunk Dashboards and Alert setup * Familiarity with SPLOC and Splunk OTEL * Used Splunk ...

Mid-Sr Java Engineer

Sunnyvale, CA · On-site

$61.50 - $84.50/hr

Splunk * Spring Boot * No SQL - Cassandra Qualifications: * 4-7 years' Experience in Spring framework and Spring Boot * hands-on developer with very good fundamentals in Java and computer science ...

Sr. Software Engineer

Los Angeles, CA

$132K - $174K/yr

... Splunk Cloud Exposure to OS/package management, including RHEL7 to EL8/9 shifts and yinst to RPM ... Experience mentoring IC3-level engineers to reduce single points of failure (SPOFs) Qualifications ...

Sr. Software Engineer

Los Angeles, CA · On-site +1

$132K - $174K/yr

... Splunk Cloud Exposure to OS/package management, including RHEL7 to EL8/9 shifts and yinst to RPM ... Experience mentoring IC3-level engineers to reduce single points of failure (SPOFs) Qualifications ...

AWS Cloud Engineer

San Jose, CA · On-site

$65.25 - $87.25/hr

AWS Cloud Engineer/Only USC & GC Location: Remote position ( San Jose, CA) Fulltime position ... Experience with Splunk deployment, configuration, operations, and troubleshooting * Experience ...

AWS Cloud Engineer

San Jose, CA · On-site

$65.25 - $87.25/hr

AWS Cloud Engineer/Only USC & GC Location: Remote position ( San Jose, CA) Fulltime position ... Experience with Splunk deployment, configuration, operations, and troubleshooting * Experience ...

Lead Linux Kernels Engineer with C, ARM experience needed for US software companies. We have a key ... tomcat. splunk agent deployment, report creation, distributed splunk deployment. puppet package ...

Lead Linux Kernels Engineer with C, ARM experience needed for US software companies. We have a key ... Knowledge on o/s satellite mgmt, authentication (qmx), apache, tomcat. splunk agent deployment ...

Splunk, a Cisco company, is building a safer and more resilient digital world with an end-to-end ... DevOps, security, business applications, and/or analytics. Subscription, SaaS, or Cloud software ...

DevOps Engineer

San Diego, CA

$56 - $76.75/hr

Experience with commercial or open source monitoring systems like Splunk, Nagios, Cacti, etc. Experience with automated deployment/ Continuous Integration/ Release Engineering tools like TeamCity ...

next page

Showing results 1-20

Splunk Engineer information

What are the key skills and qualifications needed to thrive as a Splunk Engineer, and why are they important?

To thrive as a Splunk Engineer, you need expertise in data analysis, log management, and scripting languages like Python or Bash, often backed by a degree in computer science or related field. Familiarity with Splunk Enterprise, Splunk Cloud, and certifications such as Splunk Certified Power User or Splunk Certified Admin are typically required. Strong problem-solving abilities, attention to detail, and effective communication help you stand out in this position. These skills are crucial for efficiently managing complex data environments, delivering actionable insights, and supporting organizational security and operations.

What are some common challenges Splunk Engineers face when managing large-scale log data environments?

Splunk Engineers working with large-scale log data environments often encounter challenges related to data ingestion bottlenecks, maintaining indexer performance, and ensuring efficient search query execution. Balancing storage management with retention policies and optimizing dashboards for real-time analysis can also be complex. Successful engineers proactively collaborate with IT, security, and development teams to fine-tune data sources, streamline parsing, and implement best practices for scalability, ensuring that Splunk delivers timely and actionable insights.

What is the difference between Splunk Engineer vs Data Analyst?

AspectSplunk EngineerData Analyst
Required CredentialsSplunk certifications, technical degreesStatistics, data analysis certifications, degrees
Work EnvironmentIT/security teams, tech-focused companiesBusiness, marketing, finance departments
Employer & Industry UsageTech, cybersecurity, enterprise ITFinance, healthcare, retail, marketing

Splunk Engineers focus on deploying, configuring, and maintaining Splunk platforms for data monitoring and security. Data Analysts interpret data to generate insights for business decisions. While both roles work with data, Splunk Engineers specialize in technical implementation of Splunk tools, whereas Data Analysts focus on analyzing data to inform strategies.

What is a Splunk Engineer?

A Splunk Engineer is an IT professional who specializes in deploying, configuring, and managing Splunk software for data analysis and monitoring. They are responsible for setting up data ingestion pipelines, creating dashboards, and developing alerts to help organizations monitor their systems and security. Splunk Engineers often work with large datasets to extract meaningful insights, support troubleshooting, and ensure system health. Their expertise is essential for leveraging Splunk’s capabilities in IT operations, security, and compliance.
What are the most commonly searched types of Splunk Engineer jobs in California? The most popular types of Splunk Engineer jobs in California are:
What job categories do people searching Splunk Engineer jobs in California look for? The top searched job categories for Splunk Engineer jobs in California are:
What cities in California are hiring for Splunk Engineer jobs? Cities in California with the most Splunk Engineer job openings:
Security Engineer - SIEM (Splunk) Platform & Operations

Security Engineer - SIEM (Splunk) Platform & Operations

Samsung SDS America

San Jose, CA • On-site

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Posted 23 days ago


Samsung SDS America rating

6.8

Company rating: 6.8 out of 10

Based on 14 frontline employees who took The Breakroom Quiz

136th of 207 rated it services


Job description

Samsung SDS America (SDSA) serves as the U.S. technology and innovation hub for Samsung's global enterprise solutions, delivering secure, scalable, and high-performance IT services that support some of the world's most complex business environments. As SDSA continues to expand its cloud, mobility, analytics, and cybersecurity capabilities, maintaining a resilient security operations foundation is essential to protecting the company's digital assets and ensuring uninterrupted service delivery.
Position Summary:
As Security Engineer, you'll join the Cybersecurity Operations team, where you'll serve as the frontline detective monitoring and correlating real-time threat data from firewalls, cloud assets, EDR, and AI-driven platforms like Darktrace. You'll design, tune, and optimize Splunk Enterprise Security dashboards, detection rules, and correlation searches to cut false positives while delivering rapid, high-fidelity alerts. Leveraging your experience SOC environments, you'll lead deep incident investigations, spearhead proactive threat-hunting missions, and drive remediation priorities based on risk and business impact. Collaboration is key: you'll partner with global engineers, cloud specialists, and incident-response teams to continuously improve our security posture and document best-practice playbooks.
This is a Full Time Onsite position located in San Jose, CA.
Responsibilities:
  • Monitor and analyze security event logs from multiple sources, including firewalls, intrusion detection/prevention systems, endpoint protection platforms, servers, cloud environments, and tools like Darktrace, to identify potential threats.
  • Monitor, triage, and investigate alerts and logs within the Splunk SIEM and Splunk Enterprise Security (ES) platform.
  • Assist in improving SIEM processes, detection coverage, alert fidelity, and operational workflows including creating dashboards
  • Support the onboarding and integration of logs from enterprise systems into the Splunk environment.
  • Validate log source completeness, data normalization, rule logic, and alert relevance across critical systems and infrastructure
  • Perform initial analysis of security events, escalate incidents when appropriate, and assist with root cause identification.
  • Conduct in-depth investigations of security incidents and recommend remediation and containment actions.
  • Conduct proactive threat hunting using SIEM, EDR, CASB, and network detection tools, such as Darktrace, to identify suspicious activity that may have bypassed traditional controls.
  • Tune and optimize correlation searches, detection rules, dashboards, and use cases to improve operational efficiency and reduce false positives.
  • Prioritize remediation efforts based on risk, severity, and business impact.
  • Participate in incident response activities and support threat hunting initiatives as needed.
  • Collaborate with cross-functional teams to respond effectively to cybersecurity incidents and strengthen overall security posture.
  • Create and maintain documentation for log flows, detection use cases, triage procedures, playbooks, cybersecurity processes, and operational standards.

Requirements
  • Bachelor's degree in Computer Science, Information Security, Information Assurance, or a related field; Master's degree preferred.
  • 3+ years of experience in a cybersecurity operations or related security role.
  • 2+ years of hands-on experience administering Splunk Enterprise Security (ES).
  • Strong hands-on experience with Splunk log ingestion, data normalization, search heads, indexers, SPL query development, and dashboard optimization.
  • Knowledge of detection engineering, correlation rule development, and incident response workflows.
  • Proven experience in threat analysis & incident response.
  • Strong understanding of security log sources, including Windows and Linux servers, firewalls, endpoint tools, cloud infrastructure, and network detection platforms, such as Darktrace.
  • Experience triaging and analyzing security alerts in complex, multi-platform enterprise environments.
  • Familiarity with cloud platforms such as AWS, Azure, or similar environments.
  • Strong analytical, communication, and collaboration skills, with the ability to clearly present findings and recommendations.
  • Ability to work effectively across diverse global teams and adapt to evolving business and technical environments.
  • Curious, resilient, and data-driven, with a proactive approach to solving security challenges.

Preferred Qualifications:
  • Relevant certifications such as Splunk Enterprise Security Certified Admin.
  • Experience with supporting tools such as Darktrace, Crowdstrike, or Netskope are highly preferred
  • Active knowledge & experience with rule creation & executing correlation searches in Splunk.

Benefits
Samsung SDSA offers a comprehensive suite of programs to support our employees:
  • Top-notch medical, dental, vision and prescription coverage
  • Wellness program
  • Parental leave
  • 401K match and savings plan
  • Flexible spending accounts
  • Life insurance
  • Paid Holidays
  • Paid Time off
  • Additional benefits

Samsung SDS America, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity or expression, national origin, disability, status as a protected veteran, marital status, genetic information, medical condition, or any other characteristic protected by law.
We are committed to providing reasonable accommodations to participate in the job application or interview process for candidates with disabilities. Please let your recruiter know if you need an accommodation at any point during the interview process.
The base pay range for this role depends on appropriate skills, experience, and technical level. Career Level 2 base salary is USD $125,000-175,000.
Individual base pay depends on various factors, in addition to primary work location, such as complexity and responsibility of role, job duties/requirements, and relevant experience and skills.
Certain roles are eligible for additional rewards, including annual bonus. U.S.-based employees have access to medical, dental, and vision insurance, a 401(k) plan and company match, short-term and long-term disability coverage, basic life insurance, and wellbeing benefits, among others. U.S.-based employees also receive, per calendar year, up to 10 scheduled paid holidays, and Paid Time Off.

What Samsung SDS America employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom