Detection Engineer

RESPONSIBILITIES: OpenKyber has a client that is seeking a Splunk Dashboard Engineer in Morrisville, NC.

Summary: The ideal candidate specializes in translating security telemetry-logs, alerts, notable events, and metrics-into actionable dashboards that help analysts detect threats faster, investigate incidents efficiently, and measure the effectiveness of detection and response workflows. This role directly supports SOC operations, leadership visibility, and continuous improvement of security outcomes through data driven insights.

Key Responsibilities:

• Design and maintain Splunk dashboards that support incident detection, investigation, and response workflows within the SOC
• Develop dashboards and visualizations for security metrics such as: Incident volume and severity; Mean Time to Detect (MTTD) and Mean Time to Respond/Resolve (MTTR); Alert fidelity and false positive trends
• Build and optimize Splunk searches, reports, and dashboard panels that surface suspicious activity, detections, and notable events
• Partner closely with Detection Engineers, Incident Responders, and SOC Analysts to understand use cases, threats, and investigative requirements
• Ensure dashboards align with SOC workflows, enabling analysts to quickly pivot from visualization to investigation
• Improve dashboard performance and usability by refining searches and data models used for security analytics
• Document dashboard logic, metrics definitions, and assumptions to ensure clarity and operational consistency

REQUIREMENTS:

• Hands on experience building dashboards and reports in Splunk, ideally in a SOC or cybersecurity context
• Experience working with security related data sources such as authentication logs, endpoint telemetry, network logs, or application security logs
• Experience collaborating with incident responders, detection engineers, or SOC analysts
• Strong analytical mindset with attention to detail and operational accuracy
• Ability to transform unstructured security data into clear, actionable visual insights

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in OpenKyber's sole discretion unless and until paid and may be modified in its discretion consistent with the law. This job is not eligible for bonuses, incentives or commissions.

OpenKyber is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from OpenKyber and its affiliates, and service providers. Note that if you choose to communicate with OpenKyber via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.

For applications and inquiries,