Splunk Engineer

Your work profile.

We are seeking SIEM Engineer (Splunk) to support the ongoing
operations and optimization of our Splunk -based log management infrastructure.
These resources will play a critical role in ensuring effective log ingestion,
alerting, dashboarding, and system performance across both on -premises and
cloud environments.

 Key Responsibilities (Project -Specific):

1. Splunk
   Infrastructure Management: Maintain and optimize Splunk environments
   (on -premise and cloud).
   
2. Ensure
   consistent and reliable log ingestion from diverse systems and
   applications.
   
3. Data
   Onboarding & Management: Define and implement data onboarding
   processes, field extractions, and normalization.
   
4. Collaborate
   with asset -owning teams to ensure forwarder coverage and log
   completeness.
   
5. Alerting
   & Dashboards: Create and maintain dashboards and custom SPL queries
   for operational visibility.
   
6. Ensure
   accuracy and effectiveness of alerting mechanisms within Splunk.
   
7. Troubleshooting
   & Support: Investigate and resolve issues related to Splunk alerts
   and data ingestion.
   
8. Provide
   solutions and recommendations for improving system performance.
   
9. Automation
   & Documentation: Assist in developing automation tools for efficient
   Splunk management.
   
10. Document
    procedures, configurations, and architectural changes.
    

Education:

• Bachelor’s
  degree in Information Security, Computer Science, or a related field. A
  Master’s degree in Cybersecurity or Business Management is preferred.
  

Required Skill Set:

• Proficiency
  in Splunk Query Language (SPL) for creating searches, alerts, and
  dashboards.
  
• Experience
  with Splunk data onboarding, field extractions, and log normalization.
  
• Familiarity
  with AWS Cloud environments and integration with Splunk.
  
• General
  scripting knowledge (Python preferred) for automation and tooling.
  
• Strong
  troubleshooting skills and ability to resolve complex Splunk -related
  issues.
  
• Experience
  collaborating with cross -functional teams in enterprise environments.
  
• Strong
  documentation and communication skills.
  
• Ability
  to manage time effectively and meet operational goals.