Develop and optimize Splunk use cases and dashboards, ensuring real-time monitoring and analysis of security events from inception through to production deployment. Lead the customization and fine-tuning of SIEM tools (Splunk ES, QRadar) to reduce false positives, streamline alerting processes, and enhance detection capabilities, significantly improving security operations efficiency. Design advanced queries and tailored use cases to address specific business needs, including insider threat detection, APT identification, and cloud infrastructure security monitoring. Proactively monitoring and analyzing security alerts generated by SIEM tools (Splunk ES, QRadar), identifying and escalating high-priority incidents while ensuring prompt and effective response. Conduct root cause analysis (RCA) for security incidents, providing detailed post-incident reports and actionable insights to prevent future occurrences. Work under supervision. Travel and/or relocation to unanticipated client sites throughout USA is required.