Description

You will manage the operation, maintenance, and optimization of the Splunk log aggregation and SIEM platform.

This role is on-site.

Responsibilities

• Maintain, upgrade, and troubleshoot Splunk servers, clusters, and management systems.
• Develop custom monitors, alerts, dashboards, and scripts for data manipulation.
• Monitor cluster health, manage patching, and tune licenses across network environments.
• Design Splunk solutions for Incident Response and integrate contextual data into notable events.
• Audit configurations and participate in Change Management to ensure system integrity.

Required Skills

• 5+ years of experience implementing and administering Splunk and Splunk Enterprise Security.
• Proficiency writing complex queries in Splunk Processing Language (SPL).
• Certified Splunk Enterprise Administrator or Certified Splunk Administrator credential.
• Scripting experience in Python, Bash, Perl, Shell, PowerShell, SQL, D3, HTML, XML, CSS, or Java.
• Ability to create technical documentation and network topology diagrams.
• Proven ability to perform systems analysis and modify data ingestion parameters.
• Experience with solution engineering to ensure components meet technical standards.

Key Skills

Education

Any Graduate