Splunk Engineer

Your work profile.

We are seeking SIEM Engineer (Splunk) to support the ongoing operations and optimization of our Splunk-based log management infrastructure. These resources will play a critical role in ensuring effective log ingestion, alerting, dashboarding, and system performance across both on-premises and cloud environments.

Key Responsibilities (Project-Specific):

1. Splunk Infrastructure Management: Maintain and optimize Splunk environments (on-premise and cloud).
2. Ensure consistent and reliable log ingestion from diverse systems and applications.
3. Data Onboarding & Management: Define and implement data onboarding processes, field extractions, and normalization.
4. Collaborate with asset-owning teams to ensure forwarder coverage and log completeness.
5. Alerting & Dashboards: Create and maintain dashboards and custom SPL queries for operational visibility.
6. Ensure accuracy and effectiveness of alerting mechanisms within Splunk.
7. Troubleshooting & Support: Investigate and resolve issues related to Splunk alerts and data ingestion.
8. Provide solutions and recommendations for improving system performance.
9. Automation & Documentation: Assist in developing automation tools for efficient Splunk management.
10. Document procedures, configurations, and architectural changes.

Education:

• Bachelor's degree in Information Security, Computer Science, or a related field. A Master's degree in Cybersecurity or Business Management is preferred.

Required Skill Set:

• Proficiency in Splunk Query Language (SPL) for creating searches, alerts, and dashboards.
• Experience with Splunk data onboarding, field extractions, and log normalization.
• Familiarity with AWS Cloud environments and integration with Splunk.
• General scripting knowledge (Python preferred) for automation and tooling.
• Strong troubleshooting skills and ability to resolve complex Splunk-related issues.
• Experience collaborating with cross-functional teams in enterprise environments.
• Strong documentation and communication skills.
• Ability to manage time effectively and meet operational goals.