Zane Farling

Senior security engineer with 20+ years in IT and 10+ years engineering and supporting enterprise SIEM platforms — including 10+ years hands-on with Splunk Enterprise Security — across multi-tenant MSSP environments.

Splunk

Consultant experience in onboarding, normalizing, and enriching security telemetry across cloud, endpoint, and network sources, and in building automation (Ansible) that improves operational efficiency across client environments. Mentors engineering teams, serves as a trusted technical advisor on architecture and platform decisions, and has supported State and Local Government (SLG) client environments.

Manager, SIEM Engineering at Cyderes (2023-05 – 2026-07)

• Sustained 99.8% SLA performance across 45 Splunk and 56 CrowdStrike enterprise clients by leading day-to-day administration of SIEM and EDR security solutions in a multi-tenant managed services environment.
• Closed recurring security monitoring gaps by reviewing and analyzing Splunk system logs for performance and functional anomalies and tuning detection and correlation logic.
• Strengthened team incident-response capability by mentoring 4–6 security engineers on triage and escalation as senior technical escalation point.
• Expanded detection engineering capacity by completing Palo Alto Cortex XSIAM training and authoring implementation documentation adopted org-wide.

Lead Splunk Consultant at SP6 (now Aditum) (2020-11 – 2023-03)

• Migrated 75TB of archived historical data with zero loss by leading multi-phase Splunk Cloud migrations from legacy on-premises environments over a two-year engagement.
• Improved detection accuracy 40% by deploying Splunk Enterprise Security and configuring automated threat-detection and correlation rules across SOC/NOC teams.
• Achieved zero rework and clean pre-migration validation by upgrading universal forwarders and premium Splunk applications ahead of cloud transitions.
• Secured client-approved cloud migration designs by leading architecture workshops with stakeholders and translating requirements into technical solutions.

Splunk Infrastructure Engineer at Wells Fargo (via TEKsystems) (2020-09 – 2020-11)

• Identified 15 continuous-improvement opportunities for Splunk adoption and optimization through an enterprise-wide infrastructure audit.
• Eliminated deployment errors by automating Splunk application and technical add-on rollouts with Ansible playbooks across departments.
• Delivered consistent, coordinated releases by aligning deployment schedules and technical requirements across department stakeholder groups.

Splunk Professional Service Consultant at Sierra-Cedar (2016-04 – 2020-05)

• Standardized threat detection and incident investigation capability by designing and deploying enterprise-grade Splunk Enterprise Security architectures for 18 clients.
• Delivered cost-effective, cloud-ready SIEM alternatives by configuring scalable Splunk Cloud environments for 12 clients.
• Sustained sub-second search performance at 14TB+ daily ingestion volumes by architecting and tuning high-throughput Splunk environments.
• Advised C-suite and security leadership on architecture and use-case requirements, translating technical concepts into clear business value for stakeholders.
• Completed 8 SIEM-to-Splunk migrations from legacy platforms, managing cutover coordination and post-migration validation.

Network Administrator at Morgan White Group (2015-07 – 2016-03)

• Established connectivity and remote administration for 3 newly opened remote offices by deploying peer-to-peer network infrastructure.
• Enabled centralized headquarters oversight of smaller office networks by designing server-based remote management architecture.

Senior Network Specialist (Security) at PERS of Mississippi (2012-03 – 2015-07)

• Reduced organizational risk exposure and met state government compliance requirements by tracking every identified vulnerability through remediation closure.
• Delivered clear visibility into internal and external security gaps by coordinating annual third-party penetration testing.
• Deployed the organization's first production Splunk environment, centralizing log management and security monitoring.
• Maintained full control over building entry systems by managing physical access control across all facilities.

Tier 1/2 IT Support at Performance Support, Inc. (2011 – 2012)

Information Systems Technology Instructor at Southwest Community College (2009 – 2011)

Network Administrator / Copier Setup & Repair at Pike Business Machines (2007 – 2009)

Division Manager / Warehouse Manager at Gulf South (2005 – 2006)

Prototype Development / CAD Operator at Spectrum Control, Inc. (2000 – 2005)

CAD Operator at CommTech (2000 – 2000)

Helpdesk Operator at Per-Se (1999 – 1999)

Information Systems Coordinator / Terminal Area Security Officer / Maintenance Data Analyst at U.S. Marine Corps (1995 – 1999)

Associate's Degree in Computer Network Support Technology – Southwest Community College