Description

Manage and maintain Splunk environments across distributed and cloud deployments.

Responsibilities

• Manage Splunk distributed deployments and Splunk Cloud environments.
• Parse and normalize events to the Splunk Common Information Model (CIM).
• Utilize data onboarded by Splunk-developed add-ons for Windows, Linux, and third-party devices.
• Integrate Splunk with other Security Information and Event Management (SIEM) platforms.
• Collaborate with customers to manage expectations and track engagement scope.

Required Skills

• Current Splunk Enterprise Certified Admin certification.
• 5+ years of experience with Splunk in distributed deployments.
• 1+ year of experience with Splunk Cloud environments.
• Experience with Splunk Enterprise Security.
• Proficiency in regular expressions.
• Experience with search time activities, including parsing and normalizing events.
• Strong written and oral communication skills.

Preferred Skills

• Current Splunk Enterprise Security Certified Admin certification.
• Knowledge of JIRA and Confluence.

Key Skills

Education

Any Graduate