Description

You will manage the operation, maintenance, and optimization of the Splunk log aggregation and SIEM platform.

This role is remote.

Responsibilities

• Maintain, upgrade, and troubleshoot Splunk servers, clusters, management systems, and associated applications or add-ons.
• Develop and manage custom Splunk monitors, alerts, and dashboards to support incident response.
• Perform system analysis to modify data ingestion parameters and deploy new tools or applications.
• Optimize system performance and license usage across multiple network environments.
• Automate Splunk deployments and orchestration while managing patching and updates for hosts and software.

Required Skills

• 5+ years of experience implementing and administering Splunk and Splunk Enterprise Security.
• 4+ years of experience in Splunk Administration.
• Certified Splunk Enterprise Administrator or Certified Splunk Administrator certification.
• 4+ years of experience as a System Administrator in Windows and Linux environments.
• 4+ years of experience with automation using frameworks such as SaltStack, Puppet, Chef, or Ansible.
• 4+ years of experience in public cloud environments, including AWS or Azure.
• Proficiency writing queries in Splunk Search Processing Language (SPL).
• 4+ years of scripting experience in languages including Bash, Perl, Shell, Powershell, SQL, D3, HTML, XML, CSS, JAVA, or Python.
• Experience creating technical documentation and network topology diagrams.

Key Skills

Education

Any Gradute