Description

You will engineer and maintain Splunk environments to support data ingestion, search performance, and security analytics.

This role is on-site.

Responsibilities

• Optimize search performance and efficiency across large datasets using tuning and caching.
• Strengthen the stability and reliability of Splunk data pipelines for integrations and exports.
• Review and rationalize existing knowledge objects, including saved searches and dashboards.
• Implement monitoring to track field drift and configuration defects affecting detections.

Required Skills

• 5+ years of hands-on experience with Splunk Enterprise / Enterprise Security administration and engineering.
• Expert capability in SPL tuning, indexing strategy, search optimization, and performance troubleshooting.
• Proven experience ensuring data pipeline reliability and ingestion stabilization.
• Familiarity with Splunk governance principles regarding knowledge object hygiene and retention.
• Proficiency in Python or scripting for automation and advanced data handling.
• Experience with CI/CD principles applied to detection workloads.

Preferred Skills

• Experience with security detection engineering or detection-as-code frameworks.
• Background in ML/AI features within Splunk or adjacent systems.

Key Skills

Education

Any Gradute