Description

You will stabilize, optimize, and improve the Splunk environment to meet security, compliance, and analytics requirements.

Responsibilities

• Improve search speed and efficiency across large datasets by implementing caching and tuning practices.
• Strengthen stability and reliability of Splunk data pipelines for exports and integrations.
• Review and rationalize existing knowledge objects, including saved searches, lookups, and dashboards.
• Define lightweight governance and lifecycle controls for detection artifacts and knowledge objects.

Required Skills

• 10+ years of strong, hands-on experience with Splunk Enterprise / Enterprise Security administration and engineering.
• Expert capability in SPL tuning, indexing strategy, search optimization, and performance troubleshooting.
• Proven experience with data pipeline reliability and ingestion stabilization.
• Familiarity with Splunk governance principles (knowledge object hygiene, schema evolution, retention/access practices).
• Proficiency in Python or scripting for automation and advanced handling.
• Hands-on experience with Splunk Data Pipelines.
• Demonstrated ability in Search Optimization and Indexing Strategy.
• Experience with Ci/cd workflows.

Key Skills

Education

Any Graduate