Staff Cyber Security Logging Engineer 45

About Jack Henry

At Jack Henry, we're more than a technology company, we're a force for good in financial services. We're redefining how community banks and credit unions connect with the people they serve. Our mission is rooted in people inspired innovation, empowering financial institutions to deliver seamless, secure, and human centered experiences. We deliver cutting-edge solutions that are paving the way for the next generation of digital banking and payments, but our true impact begins with our associates. If you're ready to help transform an industry and grow with a company that values purpose, collaboration, and excellence then we'd love to meet you.

Position Overview

We are seeking a Staff Cyber Security Logging Engineer to join our team. As a deeply skilled engineer at the intersection of security and big data, you possess an architectural mindset and a passion for pipeline optimization. You are a Subject Matter Expert in the Splunk and Cribl ecosystems, with a proven track record of managing massive data flows into SIEM, SOAR, and cloud-native data lakes. You thrive in complex enterprise environments where self-motivation and technical leadership are essential for success.

This position may be worked remotely within the United States, with the exception of California. The working hours will be flexible around 8am to 5pm based on time zone and may work on call as needed during the event of a data outage. All positions, regardless of location, may require an onsite interview or in-person onboarding requirement to verify your identity.

Salary Range: The salary range for this position is $111,500 - $165,000 and will be determined based on location and experience level.

Immigration Sponsorship: This position is ineligible for immigration sponsorship and support. Please do not apply if at any time you will need immigration support now or in the future (i.e., H-1B, PERM).

Your Responsibilities

• Design and implementation of enterprise logging and data solutions.
• Identifying suboptimal configurations and defining resolution strategies for enterprise logging and data platforms.
• Ensuring license, ingest, and cost prevention strategies are developed and applied to all applicable platforms.
• Assist with the development and creation of platform roadmaps and life cycle strategies.
• Pipeline Architecture: Design, build, and maintain scalable data pipelines to ingest, parse, and normalize security telemetry from diverse sources (Cloud, Endpoint, Network, Identity).
• Data Lifecycle Management: Implement data retention, archiving, and tiering strategies to balance compliance requirements with storage costs.
• Health & Performance Monitoring: Develop dashboards and alerts to monitor the latency, throughput, and "heartbeat" of log sources to ensure zero data loss.
• Stakeholder Collaboration: Partner with Incident Response (IR) and Detection Engineering teams to ensure they have the right data, in the right format, at the right time.
• Contributes to threat prevention by researching, recommending, developing, and implementing changes to security tools across host, network, and cloud environments.
• Provides complex troubleshooting and support for cybersecurity-related issues.
• Leads and completes assigned cybersecurity-related projects.
• Develops and implements standards to apply cybersecurity controls consistent with approved policies.
• Leads documentation and process improvement efforts.
• Resolves escalated security cases.
• Provides assistance and guidance to less experienced team members.
• May perform other job duties as assigned.

What you'll need to have

• Minimum of 9 years of experience in security data observability and management supporting security operations center (SOC) teams or similar.
• Minimum 2 years' experience as a Cribl administrator/engineer.
• Demonstrable experience with Splunk at an engineering level.
• Demonstrable experience with major SIEM/SOAR platforms.

What would be nice for you to have

• Certified Cribl Engineer is preferred, but will consider formal experience.
• Google SecOps experience.
• At least one professional level cybersecurity data management certification or similar.
• Experience in highly regulated environment or knowledge of PCI-DSS, HIPAA, or GDPR mandates.

Why Jack Henry?

At Jack Henry, we live by the motto: "Do the right thing, do whatever it takes, and have fun." It's more than a tagline, it's the foundation of our culture. We recognize that our associates are the key to our success, and we're deeply committed to their wellbeing. That's why we offer comprehensive benefits designed to support your physical, mental, and financial health so you can thrive both personally and professionally.

We're also leading the way in technology modernization, helping financial institutions evolve with speed, security, and flexibility. Our strategy focuses on delivering secure data access, mitigating fraud, and enabling seamless integration. Empowering our teams to build innovative solutions that meet the evolving needs of accountholders.

Culture of Commitment

Ask our associates why they love Jack Henry, and many will tell you it is because our culture is exceptional. We do great things together. Our culture empowers us to rise to challenges, seek new opportunities, and support one another through change. It's this shared commitment that drives our success. We're proud to foster an environment where inclusion, sustainability.