Description

Manage and optimize the Splunk environment for the Information Security Engineering team, focusing on performance, indexing, and security operations.

This role is on-site.

Responsibilities

• Diagnose and resolve performance, indexing, and search problems within Splunk.
• Design and implement custom dashboards using Splunk visualization tools.
• Onboard, normalize, and parse logs from various sources into Splunk using props and transforms.
• Utilize Splunk Enterprise Security (ES) for threat detection, correlation searches, and risk-based alerting.
• Optimize search queries and indexing strategies to improve system responsiveness.

Required Skills

• 5+ years of experience in a relevant engineering role.
• Strong knowledge of AWS, including integrating CloudTrail, CloudWatch, and S3.
• Proficiency in Python for automating Splunk tasks and data processing.
• Experience developing correlation searches and risk-based alerting in Splunk ES.
• Ability to normalize and parse data using Splunk props and transforms.
• Familiarity with cloud architecture and security best practices.

Preferred Skills

• Troubleshooting experience with complex Splunk indexing and search issues.

Key Skills

Education

Any Gradute