Description

You will own the end-to-end Splunk ecosystem, managing data ingestion, security monitoring, and visualization.

Responsibilities

• Onboard new data sources and develop log ingestion strategies using heavy forwarders.
• Build and enhance dashboards, reports, scheduled searches, and data models to monitor trends and application performance.
• Manage Splunk administration, including index maintenance, optimization, user accounts, and data retention policies.
• Configure Splunk DB Connect to ingest Salesforce data and integrate AWS cloud infrastructure metrics.
• Implement alerts and automated triggers to detect and respond to cybersecurity events like malware or unauthorized access.

Required Skills

• 5+ years of experience in Splunk engineering and administration.
• Hands-on experience with Splunk data onboarding and heavy forwarder configuration.
• Proficiency in Windows and Linux operating systems for standardizing forwarder deployment.
• Experience creating Splunk dashboards, alerts, and data models.
• Ability to manage index administration and data retention policies.
• Experience with Splunk DB Connect and Salesforce data ingestion.
• Knowledge of ingesting AWS cloud infrastructure metrics.
• Ability to analyze application logs for anomaly detection and security risk assessment.

Key Skills

Education

Any Graduate