Description

You will manage and support the Splunk cluster environment and security implementations.

Responsibilities

• Onboard data sources using UF, HF, Syslog, Splunk TA, HEC, FTPS, CSV, and DB Connect.
• Administer Splunk Enterprise Security and Splunk ES Essentials.
• Parse fields from unstructured logs without relying on Splunk Apps.
• Maintain Data Models, base save searches, and develop on-demand dashboards, rules, alerts, and reports.
• Develop use cases to address security gaps and communicate technical findings to leadership.

Required Skills

• 6+ years of experience in Splunk administration.
• Deep knowledge of Splunk configurations and architectural patterns.
• Proficiency with Splunk Common Information Model (CIM).
• Experience managing Splunk cluster environments.
• Hands-on expertise with Syslog and Splunk SIEM.
• Ability to parse unstructured data and manage field extraction.
• Strong technical troubleshooting skills to develop corrective actions.
• Bachelor's degree or equivalent graduate level education.

Key Skills

Education

Any Gradute