Splunk Core Consultant

About the role

The Splunk Core Consultant is responsible for the design, development, and implementation of the Splunk infrastructure, as well as supporting operations activities as the Splunk environment continues to go through revisions to meet requirements. In addition, the Splunk Core Consultant participates in the change of platforms from on-premises to a cloud-based environment.

Responsibilities

• Design and implement Splunk infrastructure as per customer requirements
• Perform daily, weekly, and monthly maintenance items for customer environments as required
• Create and maintain Splunk dashboards as per customer requirements
• Perform Splunk tuning for all associated Splunk environments
• Onboard Splunk data sources and TAs
• Enter actual time worked, once complete, at the end of the day, or no later than 10:00 a.m. the following workday, and submit timesheets at the end of each pay period
• Submit MSRs (weekly, monthly, etc.)
• Monitor RavenTek email on a regular basis, at least 2 times per week, and respond accordingly
• Complete required compliance training as assigned
• Other duties as assigned

Qualifications, Knowledge, And Critical Skills

• Strong communication skills
• Ability to collaborate and work efficiently and effectively in both remote and in-person interactions with the customer
• Strong interpersonal skills to advise on best practices while balancing the customer’s expectations on mission outcomes
• Experience with and very comfortable working in an agile environment
• Bachelor's degree and 6 years of experience or 8 years of related experience in lieu of
• Experience as a Splunk SME
• Experience in Data science and Cybersecurity
• Expert Splunk application and dashboard developer using complex data searches
• Expertise in Splunk SPL and Python
• Extensive experience with Enterprise Security (ES) including source data deduplication and US Government logging requirements
• Experience with Splunk Premium Apps – ITSI preferred but not required
• Experience with Splunk ML toolkit and Splunk SOAR
• Splunk Certified Architect and Splunk Core Certified Consultant certifications

Requirements

• Top Secret preferred or a Secret with the ability to upgrade to a Top Secret
• Physical demands: Sit at a workstation for extended periods; use hand(s) to handle or feel objects, tools, or controls; reach with hands and arms; see, talk and hear. Most positions require ability to work on desktop or laptop computer for extended periods of time reading, reviewing/analyzing information, and providing recommendations, summaries and/or reports in written format. Employee may be required to occasionally lift and/or move moderate to heavy amounts of weight, typically more than 40 pounds when racking equipment.