Splunk Engineer
Core
Deploy, administer, and support a distributed Splunk environment at enterprise scale to protect internal information, physical hardware, and reputation.
Role type
Senior Splunk Engineer (Security & Operations)
Builds
Logging platform performance, availability, capacity, and security dashboards/alerts
Domain
Aerospace / Cybersecurity / Log Management
Deliverable
production ML models | dashboards & analysis
Required skills
Splunk administration, complex SPL, regex, automation (Puppet/Ansible), Linux systems, Python, Git/CI/CD, incident response
Preferred skills
Splunk certifications (Architect/Security Admin), CIM/Knowledge Objects, Splunk SOAR, EDR integration, Splunk MLTK, DevOps/SRE practices
Technologies
Splunk, Puppet, Ansible, Python, Git, Linux, Splunk SOAR, EDR
Responsibilities
Deploy and standardize Splunk agent and enterprise deployment with automation; Monitor and maintain logging platform performance, availability, and capacity; Write complex SPLs for Infosec dashboards and alerts; Troubleshoot Splunk instances and Universal Forwarders; Perform data onboarding, governance, and enrichment; Support mission-critical 24/7 operational environments with rapid incident response
Seniority
Senior, hands-on IC
