Description

You will engineer, configure, and support enterprise observability solutions using Splunk Cloud, Splunk ITSI, and Splunk Infrastructure Monitoring Enterprise Edition.

Responsibilities

• Develop ITSI glass tables, service trees, entity design, KPIs, and correlation searches.
• Write SPL queries to build front-end searches, dashboards, and reports for threat detection and operational analysis.
• Create low-level design artifacts independently and high-level design artifacts to support POC prototyping.
• Perform Splunk health checks, including architecture reviews and search performance optimization.
• Automate log management processes and ingestion workflows to improve architectural efficiency.
• Conduct root-cause analysis post-implementation and partner with security teams to meet SIEM policies.

Required Skills

• 4-5+ years of Splunk experience.
• 3-5+ years of mandatory Splunk IT Service Intelligence (ITSI) development experience.
• 4-8 years of technology practitioner experience in IT Operations or Security.
• 2+ years of experience creating rules and advanced logic within Splunk.
• Expertise in developing ITSI glass tables, service trees, and notable event aggregation policies.
• Experience with cloud runtime services including AWS EC2, Lambda, CloudWatch, or Azure compute/functions.
• Proven ability to manage Splunk enterprise cloud support for large environments exceeding 5,000 servers.
• Strong proficiency in writing SPL (Search Processing Language).
• Experience in requirements gathering, documentation, and product testing.

Preferred Skills

• Splunk Certification or equivalent professional experience.
• Successful enterprise-level implementation of Splunk Cloud.

Key Skills

Education

Any Graduate