The Splunk Detection Engineer will play an important role in ensuring that security logs are appropriately formatted, ingested, tagged, and used to detect possible security events. Typical tasks may include integrating new data sources, validating and creating appropriate configurations for CIM compliant logs, processing requests from cybersecurity analysts for new detections within Splunk Enterprise Security, analyzing existing logs to identify poorly formatted logs and potential gaps when implementing new detections, adding and maintaining threat feeds within Splunk Enterprise Security, monitoring the performance of and tuning detections, managing asset and identity inventory within Splunk Enterprise Security, creating and maintaining new Splunk apps, recommending additions or changes to Splunk or its data models to meet detection needs, developing searches, reports, and other functionalities for cyber-based use-cases, assisting users with creating and optimizing searches and dashboards, and mentoring others in good development of said resources.