Description

You will stabilize, optimize, and govern our Splunk environment to ensure search performance, data reliability, and compliance. This role is on-site.

Responsibilities

• Optimize search performance and efficiency across large datasets using SPL tuning, caching, and search-hygiene practices.
• Strengthen data pipeline reliability, indexing, clustering, and correlation workloads for real-time and near-real-time flows.
• Rationalize knowledge objects (saved searches, lookups, dashboards) and implement monitoring for field drift and schema changes.
• Enable notebook-style investigative analysis and provide guidance on detection-as-code best practices and CI/CD integration.
• Support alignment with broader data governance policies, including access models, retention, and auditability.

Required Skills

• 5+ years of hands-on experience with Splunk Enterprise or Enterprise Security administration and engineering.
• Expert-level capability in SPL tuning, indexing strategy, and search optimization.
• Proven experience with data pipeline reliability and ingestion stabilization.
• Proficiency in Python or scripting for automation and advanced handling.
• Familiarity with Splunk governance principles, including knowledge object hygiene and retention practices.
• Experience with CI/CD integration for security detection workloads.

Preferred Skills

• Experience with security detection engineering or detection-as-code frameworks.
• Background in ML/AI features within Splunk or adjacent systems.

Key Skills

Education

Any Graduate