ZipRecruiter

Log In

1

Splunk Power User Jobs in California (NOW HIRING)

Schoolsfirstfcu

Incident Responder I

Tustin, CA · On-site

Splunk Power User preferred * Certified CyberDefender preferred Knowledge, Skills, and Abilities * Demonstrated ability to solve structured problems with guidance; developing capability for ...

Schoolsfirstfcu

Incident Responder I

Sacramento, CA · On-site

Splunk Power User preferred * Certified CyberDefender preferred Knowledge, Skills, and Abilities * Demonstrated ability to solve structured problems with guidance; developing capability for ...

Early Warning Services

Sr. Splunk Engineer

San Francisco, CA · Hybrid

$134K - $185K/yr

Splunk Core Certified Advanced Power User, Splunk Enterprise Certified Architect (working towards or achieved strongly desired) * Unix/Linux administration background a strong plus * Experience with ...

Apple

ML Engineer - Experimentation, Portal

Cupertino, CA · On-site

$151K - $207K/yr

You will introduce AI-powered insights through seamless user interfaces, develop workflows from ... Docker, AWS, Splunk, DataDog, etc * Frontend: Modern JavaScript/TypeScript, React, data ...

Ross

Engineer III (Software EUP)

Dublin, CA · On-site

$134K - $229K/yr

... user interfaces. • Leveraging AI-powered development tools like GitHub Copilot and MCP server ... as Splunk and Dynatrace. PHYSICAL REQUIREMENTS/ADA: The job requires the ability to work in an ...

Ross Stores, Inc

Engineer III (Software EUP)

Dublin, CA · Hybrid

$134K - $229K/yr

... user interfaces. Leveraging AI-powered development tools like GitHub Copilot and MCP server-based ... Familiarity with monitoring tools such as Splunk and Dynatrace. PHYSICAL REQUIREMENTS/ADA: The job ...

Ross Stores

Engineer III (Software EUP)

Dublin, CA · On-site

$134K - $229K/yr

... user interfaces. • Leveraging AI-powered development tools like GitHub Copilot and MCP server ... as Splunk and Dynatrace. PHYSICAL REQUIREMENTS/ADA: The job requires the ability to work in an ...

LLNL

Cyber Security Engineer

Livermore, CA · On-site

$9.8K/wk

Splunk certifications (Power or Adv. Power User) Pay Range $121,830 - $185,544 Annually $121,830 - $154,500 Annually for the SES.1 level $146,340 - $185,544 Annually for the SES.2 level This is the ...

LLNL

Cyber Security Engineer

Livermore, CA · On-site

$121K - $185K/yr

Splunk certifications (Power or Adv. Power User) Pay Range $121,830 - $185,544 Annually $121,830 - $154,500 Annually for the SES.1 level $146,340 - $185,544 Annually for the SES.2 level This is the ...

LLNL

Cyber Security Engineer

Livermore, CA · On-site

$121K - $185K/yr

Splunk certifications (Power or Adv. Power User) Pay Range $121,830 - $185,544 Annually $121,830 - $154,500 Annually for the SES.1 level $146,340 - $185,544 Annually for the SES.2 level This is the ...

next page

Showing results 1-20

All JobsSplunk Power User JobsSplunk Power User Jobs in California

Splunk Power User information

See California salary details

$28.6K

$115.5K

$156.4K

How much do splunk power user jobs pay per year?

As of Aug 16, 2026, the average yearly pay for splunk power user in California is $115,469.00, according to ZipRecruiter salary data. Most workers in this role earn between $97,700.00 and $131,800.00 per year, depending on experience, location, and employer.

How does a Splunk Power User typically collaborate with IT and security teams within an organization?

A Splunk Power User frequently acts as a bridge between raw data and actionable insights for both IT and security teams. They work closely with team members to create meaningful dashboards, alerts, and reports tailored to each department's needs. This role often involves translating technical requirements into Splunk searches and visualizations, facilitating faster troubleshooting and incident response. Regular collaboration ensures that data sources are properly onboarded and that the organization leverages Splunk's full potential for monitoring, compliance, and security.

What is the difference between Splunk Power User vs Splunk Administrator?

AspectSplunk Power UserSplunk Administrator
CredentialsBasic Splunk certifications, familiarity with Splunk queriesAdvanced certifications, deeper knowledge of Splunk architecture
Work EnvironmentEnd-users, analysts, and reporting rolesSystem management, deployment, and maintenance
Industry UsageData analysis, troubleshooting, and reportingSystem setup, configuration, and health monitoring

Splunk Power Users focus on analyzing data and creating reports using Splunk, while Splunk Administrators handle system setup, configuration, and maintenance. Both roles require familiarity with Splunk but differ in technical depth and responsibilities.

What are the key skills and qualifications needed to thrive as a Splunk Power User, and why are they important?

To thrive as a Splunk Power User, you need a solid understanding of data analysis, search processing language (SPL), and system monitoring, typically supported by experience with IT operations or cybersecurity. Familiarity with the Splunk platform, dashboards, reports, and ideally a Splunk Power User certification are important technical assets. Strong problem-solving, attention to detail, and effective communication skills help users interpret data insights and collaborate with technical teams. These skills and qualities enable efficient use of Splunk for identifying issues, optimizing performance, and supporting organizational security and compliance.

What is a Splunk Power User?

Splunk Power Users are individuals who have advanced knowledge and skills in using Splunk for searching, analyzing, and visualizing machine data. They are proficient in creating complex searches, dashboards, alerts, and reports, and often help organizations derive insights from large volumes of data. Power Users typically have access to more features than standard users, such as creating knowledge objects and managing data models, but less access than Splunk administrators. They play a crucial role in maximizing the value of Splunk within an organization by building efficient queries and sharing actionable insights with teams.

What are popular job titles related to Splunk Power User jobs in California?

For Splunk Power User jobs in California, the most frequently searched job titles are:

What job categories do people searching Splunk Power User jobs in California look for?

The top searched job categories for Splunk Power User jobs in California are:

What cities in California are hiring for Splunk Power User jobs?

Cities in California with the most Splunk Power User job openings:

Splunk Power User jobs near you
Infographic showing various Splunk Power User job openings in California as of August 2026, with employment types broken down into 86% Full Time, 9% Part Time, 2% Temporary, 2% Contract, and 1% Nights. Highlights an 91% Physical, 3% Hybrid, and 6% Remote job distribution, with an average salary of $115,469 per year, or $55.5 per hour.

Incident Responder I

SchoolsFirst Federal Credit Union

Sacramento, CA • On-site

Full-time

Re-posted 4 days ago

SchoolsFirst Federal Credit Union rating

9.2

Company rating: 9.2 out of 10

Based on 14 frontline employees who took The Breakroom Quiz

Job description

We're always looking for diverse, talented, service-oriented people to join our exceptional team.
Incident Responder I
The pay range for this position is listed below. Our pay ranges are built to allow for candidates with various levels of skill and experience to be considered, as well as for room for growth and tenure achieved in a role over time. Typical new hire salary offers fall within the minimum to midpoint of a pay range for many candidates. Any offer extended to a candidate will be based upon their unique set of knowledge, skills, education, and experience as well as internal equity.
Pay Range:
$42.41 - $63.62
Scheduled Weekly Hours:
40
What You'll Be Doing
Responsible for responding to all major systems and service incidents during business hours and extended business hours in support of IT Incident Management program. Creates and maintains unified monitoring of Infrastructure, Application and Business & IT services to proactively detect, predict and prevent service, application and security problems.
  • Monitors security and network operations in a 24x7 environment and escalates exceptions based on established procedures.
  • Participates in on-call rotation supporting production systems.
  • Performs initial triage, correlation, and documentation of security, availability, and service incidents.
  • Investigates alerts using standard tools and predefined queries; escalates incidents requiring advanced analysis or coordination.
  • Executes established incident response and availability playbooks for repeatable events.
  • Maintains accurate incident records and provides status updates to stakeholders during the incident lifecycle.
  • Utilizes and maintains monitoring dashboards and alert views (e.g., ServiceNow, Splunk, Orion, Tenable, AppDynamics, Sentinel).
  • Uses prebuilt dashboards and analytics to identify potential issues (service degradation, security events, insider risk indicators).
  • Follows established monitoring rules and procedures to support proactive fault detection and reduce alert noise.
  • Coordinates with internal teams and vendors for resolution of assigned incidents.
  • Tracks SLA adherence and ensures data quality for reporting and KPI tracking.
  • Maintains working knowledge of tools, processes, and incident response best practices.

Additional Job Functions
  • Performs other duties as assigned
  • Complies with regulatory compliance and assigned training requirements including but not limited to BSA regulations corresponding to their specific job duties. Failure to do so may result in disciplinary and other employment related actions.

Qualifications
  • High School Diploma or GED required
  • Bachelor's Degree in a related field or equivalent years of experience required
  • 1-3 years of prior relevant experience required
  • CompTIA Security+ required
  • ITIL Foundation required
  • CompTIA CySA+ preferred
  • Splunk Power User preferred
  • Certified CyberDefender preferred

Knowledge, Skills, and Abilities
  • Demonstrated ability to solve structured problems with guidance; developing capability for unstructured scenarios.
  • Excellent written and verbal communication with ability to document incidents clearly.
  • Basic knowledge of TCP/IP and operating systems.
  • Foundational understanding of enterprise security and monitoring concepts.
  • Familiarity with reading basic Kusto Query Language (KQL) and Search Processing Language (SPL).
  • Foundational understanding of industry security frameworks (e.g., ISO 27001, NIST 800-53)
  • Working knowledge of:
  • Microsoft Active Directory, Exchange, SQL
  • Enterprise network operations
  • SIEM platforms and alerting frameworks
  • Scripting basics (PowerShell / Python)
  • Change Management and system hardening practices
  • SOC operations processes and tooling

    • Additional Knowledge, Skills, and Abilities
      Understands basic alert types and indicators across endpoint, network, and cloud sources.
      Participates in tabletop exercises as a responder executing predefined playbooks, validating alert triage and escalation processes, and documenting actions to support testing of detection and response procedures.
      Follows predefined detection logic and recognizes common false positives.
      Understands the incident response lifecycle and follows defined playbooks.
      Escalates incidents based on predefined severity and impact criteria.
      Reviews logs and alerts to support basic investigations and documentation.
      Identifies obvious indicators of compromise using available tools.
      Understands basic integration between tools (SIEM, EDR, ticketing).
      Understands basic business impact of incidents (service disruption, user impact).
      Escalates issues affecting critical systems or users.
      Provides clear and accurate incident updates to internal teams.
      Documents incidents in a structured and understandable format.
      Identifies basic issues in alerts, processes, or documentation.
      Provides feedback to improve playbooks and monitoring.
      Understands basic concepts of security controls and alert generation.
      Recognizes how alerts are triggered within tools.

    SchoolsFirst FCU is committed to Diverse, Equitable, and Inclusive Hiring
    At SchoolsFirst FCU we are dedicated to building and growing a diverse, inclusive, and authentic Dream Team, so if you're excited about a position or wanting to make a career change but your past experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyway. Many skills are transferrable and you may be just the right candidate for the position, or for other roles we are working on.
    SchoolsFirst Federal Credit Union is committed to fostering, cultivating, and preserving a culture of diversity and inclusion. SchoolsFirst FCU is an equal opportunity employer and prohibits discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibits discrimination against all individuals based on their race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, political affiliation, or genetic information.
    This organization participates in E-Verify.

    What SchoolsFirst Federal Credit Union employees say

    Pay

    Benefits

    Hours and flexibility

    Workplace

    Get the full story on Breakroom

    Apply