Description

You will design and manage Splunk Enterprise applications with a focus on SIEM capabilities.

This role is hybrid.

Responsibilities

• Configure data inputs, onboard log sources, and validate ingestion processes.
• Optimize Splunk SPL queries for performance.
• Develop automation scripts using Python, Bash, or PowerShell to improve operational efficiency.
• Utilize Splunk REST APIs to integrate third-party tools and automate workflows.
• Develop or configure Splunk apps and add-ons to extend platform capabilities.

Required Skills

• 8+ years of technical experience in development and Splunk Enterprise application management.
• 5+ years of relevant experience in Splunk Cloud or Enterprise Administration.
• Expertise in Splunk Data Models, Data Enrichment via lookups, and Field Extractions.
• Proficiency with Python, Bash, or PowerShell for automation.
• Working knowledge of Azure, AWS, and GCP security tools and components.
• Understanding of the MITRE ATT&CK Framework and various cybersecurity frameworks.
• Knowledge of Azure services, architecture, and cloud security best practices.

Preferred Skills

• Any Graduate degree.

Key Skills

Education

Any Graduate