Description

You will build, maintain, and optimize Splunk environments for operational and security monitoring.

This role is on-site.

Responsibilities

• Develop and optimize advanced SPL queries for analytics, monitoring, and security use cases.
• Manage data ingestion and indexing from cloud platforms, servers, applications, and endpoints.
• Configure and maintain Splunk forwarders and data inputs across self-hosted and GovCloud environments.
• Design and deliver dashboards, reports, and visualizations for technical and business stakeholders.
• Automate processes using Python, Bash, and PowerShell, and integrate Splunk with ServiceNow, Archer, Azure, and AWS.

Required Skills

• Strong hands-on experience with Splunk Search Processing Language (SPL).
• Proven experience with data ingestion, forwarder management, and dashboard development.
• Proficiency in scripting and automation using Python, Bash, and PowerShell.
• Experience with Splunk environments, including self-hosted and Splunk GovCloud.
• Familiarity with integrating data sources using Syslog-NG, Cribl, AWS Lambda, and Azure Function Apps.
• Solid understanding of IT Infrastructure, Networking, and Security concepts.
• Bachelor’s or Master’s degree with 7+ years of relevant experience.

Preferred Skills

• Experience with Splunk AI Toolkit (AITK / MLTK).
• Knowledge of Splunk MCP Server.

Key Skills

Education

Bachelor's or Master's degrees