Description

You will manage the operation, maintenance, and optimization of the Splunk log aggregation and SIEM platform.

Responsibilities

• Maintain, upgrade, and troubleshoot Splunk servers, clusters, management systems, and applications.
• Develop and manage custom Splunk monitors, alerts, and dashboards to support Incident Response teams.
• Perform systems analysis to modify data ingestion parameters and deploy new tools or applications.
• Manage patching, orchestration, and automated Splunk deployments across multiple network environments.
• Monitor cluster health, audit configurations, and participate in the Change Management process.

Required Skills

• 5+ years of experience implementing and administering Splunk and Splunk Enterprise Security.
• Proficiency writing Splunk queries using Splunk Processing Language (SPL).
• Certified Splunk Enterprise Administrator or Certified Splunk Administrator credential.
• Experience developing scripts in Python, Bash, Perl, PowerShell, SQL, Java, HTML, XML, or CSS.
• Ability to create technical documentation and network topology diagrams.
• Experience with 3rd party software API integration.
• Proven ability to perform performance and license tuning for Splunk components.

Preferred Skills

• Experience with D3.js for advanced dashboard visualizations.

Key Skills

Education

Any Graduate