Description

You will manage the operation, maintenance, and optimization of the Splunk log aggregation and SIEM platform.

Responsibilities

• Maintain, upgrade, and troubleshoot Splunk servers, clusters, management systems, and required applications or add-ons.
• Develop and manage custom Splunk monitors, alerts, dashboards, and advanced scripts for data manipulation.
• Monitor cluster health, manage patching, and perform license tuning across multiple network environments.
• Design and implement Splunk solutions to support Incident Response teams and integrate contextual data into notable events.
• Audit configurations and participate in Change Management processes to ensure system integrity.

Required Skills

• 5+ years of experience implementing and administering Splunk and Splunk Enterprise Security.
• Proficiency writing complex queries in Splunk Processing Language (SPL).
• Experience with scripting in Python, Bash, Perl, Shell, PowerShell, SQL, D3, HTML, XML, CSS, or Java.
• Certified Splunk Enterprise Administrator or Certified Splunk Administrator credential.
• Ability to create technical documentation and network topology diagrams for IT systems.
• Proven ability to perform systems analysis and modify data ingestion parameters.
• Experience with solution engineering to ensure components meet technical standards.

Key Skills

Education

Any Graduate