Job Description

We are looking for a highly skilled and proactive Splunk Engineer to join our Information Security Engineering team. In this role, you will be responsible for administering and optimizing our Splunk environment, developing dashboards, integrating logs from multiple sources, and driving enterprise security initiatives. The ideal candidate will bring hands-on experience in both development and administration, strong problem-solving skills, and expertise in AWS and Python scripting.

Key Responsibilities

Splunk Administration & Troubleshooting

• Diagnose and resolve issues related to performance, indexing, and search functionality.
• Monitor overall system health and ensure optimal reliability of the Splunk environment.

Dashboard & Application Development

• Design and deliver custom dashboards and visualizations to provide actionable business and security insights.
• Translate complex requirements into effective, user-friendly Splunk solutions.

Performance Optimization

• Fine-tune search queries, indexing, and ingestion strategies for maximum efficiency.
• Enhance data responsiveness and system scalability.
• Identify and address vulnerabilities impacting Splunk performance.

Enterprise Security Management

• Leverage Splunk Enterprise Security (ES) for advanced threat detection and incident response.
• Develop correlation searches, alerts, and risk-based monitoring strategies.

Log Integration & Data Management

• Onboard and normalize logs from diverse platforms including servers, applications, and cloud environments.
• Apply props and transforms to parse and standardize data for reporting and analysis.

Preferred Skills & Experience

AWS Expertise

• Hands-on experience integrating AWS services (CloudTrail, CloudWatch, S3, etc.) with Splunk.
• Strong understanding of cloud infrastructure and security best practices.

Python Scripting

• Automate Splunk tasks and workflows with Python.
• Build custom scripts for data enrichment, integrations, and advanced analytics.

Certifications

• Splunk certification (Administrator/Developer) is required.

Job Tags

Similar Jobs