{"id":4130016,"url":"https://alion.io/job/zotec-partners-splunk-engineer-zotec-partners","title":"Splunk Engineer - Zotec Partners","company":{"id":7461,"name":"Zotec Partners","domain":"zotecpartners.com","url":"https://alion.io/company/zotec-partners","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"JazzHR","truth_index":null},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Carmel, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"JavaScript","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-12T02:15:33Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T02:15:33Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"At Zotec Partners, our People make it happen.\nTransforming the healthcare industry isn’t easy. But when you build a team like the one we have, that goal can become a reality. Our accomplishments can’t happen without our extraordinary people - the men and women across the country who make up our diverse Zotec family and help make this company a best place to work.\nOver 25 years ago, we started Zotec with a clear vision, to partner with physicians to simplify the business of healthcare. Today we are more than 900 employees strong and we continue to use our incredible talent and energy to bring that vision to life. We are a team of Innovators, Collaborators and Doers.\nWe’re seeking a Splunk Security Engineer to join us.\nWe are seeking a skilled Splunk Security Engineer to join our Information Security team. In this role, you will be responsible for the administration, optimization, and support of our Splunk environment, including Splunk Enterprise, Splunk IT Service Intelligence (ITSI), Splunk Enterprise Security (ES), and Splunk Cloud deployments. You will work closely with cross-functional teams to enhance our security monitoring capabilities, develop dashboards, create efficient searches, and ensure the reliability of our Splunk infrastructure.\nWhat you’ll do:\nSplunk Implementation and MaintenanceAdminister and maintain our Splunk Enterprise environment and Splunk Cloud setup\nDeploy, configure, and update Splunk Enterprise Security (ES) and IT Service Intelligence (ITSI)\nCoordinate and configure new Splunk resources as needed\nConfigure and secure Splunk endpoints\nInstall, configure, and update various Splunk applications and add-ons from Splunkbase\nKeep Splunk and Splunkbase apps up to date\nRun periodic health checks on Splunk systems\nManage Splunk deployments to servers and workstations\nUpdate user index permissions\n\nDashboard and Search DevelopmentDesign, develop, optimize, and maintain Splunk dashboards, reports, and alerts\nCreate and refine search queries using SPL to improve detection capabilities\nDevelop custom visualization solutions to meet specific business requirements\nCreate reusable dashboard components to ensure consistency across the environment\nImplement role-based access controls for dashboards and reports\nProvide training and support to end users on dashboard functionality\nAssist team members with dashboard creation and search building\nExtract complex fields from different types of log files using regular expressions\n\nData Ingestion and ManagementOnboard and integrate new data sources into the Splunk environment\nSetup Splunk Technical Add-ons (TAs) for ingestion\nConfigure and implement HTTP Event Collector (HEC) tokens\nSetup proper parsing and field extractions for custom log types\nValidate and refine Splunk license usage based on incoming logs\nWork with development teams to implement logging standards for custom applications\nSupport cloud-based ingestion from AWS, Google Cloud, and SaaS platforms\n\nTroubleshooting and SupportTroubleshoot Splunk-related issues and performance problems\nAssist Security and Operations teams with incident investigations using Splunk\nProvide on-call support during security incidents and investigations\nAssist with Universal Forwarder troubleshooting\nPerform analysis on log data and troubleshoot missing log errors from sources\n\nCollaboration and RequirementsParticipate in on-call rotation to support security investigations and assist with incidents as needed\nStay current with Splunk updates, security threats, and industry best practices\nOther duties as assigned\n\n What you’ll bring to Zotec:3+ years of experience administering and supporting Splunk environments\nExperience with Splunk Enterprise Security (ES) and/or IT Service Intelligence (ITSI)\nStrong understanding of search processing language (SPL) and dashboard creation\nKnowledge of log sources, parsing, and normalization techniques\nDetailed technical knowledge of database and operating system security\nExperience with Linux/Unix, Windows, and MacOS operating systems\nUnderstanding of network security concepts and security monitoring\nStrong analytical and problem-solving abilities\nExcellent communication and documentation skills\nAbility to work under pressure and adapt to changing priorities\nDetail-oriented with strong organizational skills\nTeam-oriented and skilled in working within a collaborative environment\nAbility to prioritize tasks and manage time effectively\nProfessionally exercises discretion and independent judgment in day-to-day work\n Preferred:Splunk certifications (Splunk Certified Admin, Architect, or similar)\nExperience with cloud environments (AWS, Azure, GCP)\nExperience integrating custom application logs and working with development teams\nKnowledge of SIEM concepts and security frameworks (MITRE ATT&CK, NIST)\nAdvanced dashboard development skills including JavaScript, CSS, and XML\nScripting/programming experience (Python, PowerShell)\nFamiliarity with web-related technologies and protocols\nExperience with Splunk Observability and Smartstore deployments\nAt Zotec, our purpose is to make healthcare work better for everyone. We value trust, excellence, and care in how we work with our clients and each other. You’ll have the opportunity to take ownership of your work, contribute ideas, and learn from experienced colleagues who want you to succeed. If that sounds like the kind of team you’d like to join, we’d like to talk with you.\nLearn more about our organization, by visiting us at www.zotecpartners.com\nE-Verify and Equal Opportunity Employer","description_format":"text","description_chars":5552,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Revenue Cycle & Medical Billing"],"lifecycle":[{"event":"open","at":"2026-11-12T02:15:33Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 5","filings_12m":5,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":87500,"route":null,"cap_exempt":false,"checked_at":"2026-11-11T07:38:50+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":29,"reasons":["conf:1","win:early"],"computed_at":"2026-11-12T03:53:08Z"},"pay":null,"html_url":"https://alion.io/job/zotec-partners-splunk-engineer-zotec-partners","json_url":"https://alion.io/job/zotec-partners-splunk-engineer-zotec-partners.json","meta":{"generated_at":"2026-11-12T03:53:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8473,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7461},"rest":"https://alion.io/mcp/rest/get_company?id=7461"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzotec-partners-splunk-engineer-zotec-partners"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzotec-partners-splunk-engineer-zotec-partners"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzotec-partners-splunk-engineer-zotec-partners"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zotec-partners-splunk-engineer-zotec-partners\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzotec-partners-splunk-engineer-zotec-partners"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4130016}},{"tool":"search_jobs","arguments":{"company":"zotecpartners.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4130016},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}