Splunk Development & Administration Cyber Security Analyst
Core
Manage Splunk infrastructure, administer SIEM environments, and develop security dashboards for operational visibility and compliance.
Role type
Senior Splunk Administration and Development Analyst
Builds
Splunk dashboards, alerts, reports, and security compliance platforms
Domain
Cyber Security / SIEM / Log Management
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
Splunk administration, SPL, REGEX, Python, Bash, PowerShell, Linux, SQL Server, CI/CD pipelines, DevSecOps, ITIL, root cause analysis, incident management
Preferred skills
Splunk Core Certified User, Splunk Core Certified Power User, Splunk Enterprise Certified Admin, Splunk Cloud Certified Admin
Technologies
Splunk, ServiceNow, GitHub, Terraform, AWS, GCP, Ansible, Jenkins, Okta
Responsibilities
Implement and manage Splunk applications and add-ons version upgrades; Perform data onboarding, parsing, normalization, and STIX-based integration; Design, develop, optimize, and troubleshoot Splunk dashboards, searches, alerts, and reports; Monitor and maintain Splunk infrastructure components (Indexers, Search Heads, Forwarders); Investigate incidents, perform root cause analysis, and resolve operational issues; Automate routine administrative tasks using scripting; Configure and support integrations with enterprise platforms; Manage user provisioning, RBAC access management, and security governance; Monitor indexing latency, ingestion rates, and storage utilization; Create and maintain technical documentation and operational procedures.
Seniority
Mid-Senior, hands-on IC