Description

You will manage and engineer a cloud-based Splunk environment to support security, performance, and operational roles.

This role is on-site.

Responsibilities

• Administer Splunk infrastructure including search heads, indexes, deployers, and forwarders.
• Identify and onboard new log sources to support monitoring, detection, and response.
• Design, develop, and maintain complex Splunk queries, dashboards, and reports for technical and executive audiences.
• Analyze data for anomalies and trends using data visualization and reporting capabilities.
• Collaborate with stakeholders to define requirements and deliverables.

Required Skills

• 5+ years of experience in IT security or SIEM engineering.
• Hands-on experience managing Splunk apps and knowledge objects.
• Proficiency in Linux environments.
• Expertise in Splunk data analytics and data visualization.
• Experience with enterprise logging across applications, web, databases, and security systems.
• Knowledge of IDS/IPS solutions and host-based tools.
• Competency in packet analysis and log aggregation tools.

Preferred Skills

• Splunk certifications (Enterprise Certified Admin, Cloud Certified Admin, or Architect).
• Relevant security certifications such as GISF, GISP, GSSP, or GICSP.
• Knowledge of ethical hacking and IDS/IPS.

Key Skills

Education

Any Graduate