Description

You will manage and optimize the Splunk environment for the Information Security Engineering team.

Responsibilities

• Diagnose and resolve performance, indexing, and search problems within Splunk.
• Design and implement custom dashboards using Splunk visualization tools.
• Optimize search queries and indexing strategies to improve responsiveness.
• Utilize Splunk Enterprise Security (ES) for threat detection and incident response.
• Onboard, normalize, and parse logs from various sources into Splunk.

Required Skills

• 5+ years of experience in a relevant engineering role.
• Strong knowledge of AWS, including integrating CloudTrail, CloudWatch, and S3.
• Proficiency in Python for automating Splunk tasks and data processing.
• Experience developing correlation searches and risk-based alerting in Splunk ES.
• Ability to normalize and parse data using Splunk props and transforms.
• Familiarity with cloud architecture and security best practices.
• Troubleshooting experience with Splunk indexing and search issues.

Key Skills

Education

Any Gradute