Description

You manage the operation, maintenance, and optimization of the Splunk log aggregation and SIEM platform.

Responsibilities

• Maintain, upgrade, and troubleshoot Splunk servers, clusters, and management systems.
• Develop, deploy, and manage custom monitors, alerts, and dashboards for Incident Response.
• Perform system analysis to modify data ingestion parameters and conduct testing.
• Optimize system performance and license usage across multiple network environments.
• Automate deployments, orchestration, and patching for hosts and application software.

Required Skills

• 5+ years implementing and administering Splunk and Splunk Enterprise Security.
• Proficiency in Splunk Programming Language (SPL) query writing.
• Certified Splunk Enterprise Administrator or Certified Splunk Administrator.
• Scripting experience in Bash, Perl, Shell, PowerShell, SQL, Python, or Java.
• Ability to create technical documentation and network topology diagrams.
• Experience with configuration audits and Change Management processes.
• Integrating contextual data into notable events and connecting via third-party APIs.

Preferred Skills

• Familiarity with D3, HTML, XML, and CSS for dashboard development.

Key Skills

Education

Not specified