Splunk Engineer

Responsibilities

• Create and manage Splunk infrastructure, including indexers, forwarders, and search heads.
• Create and maintain custom dashboards, reports, and alerts to monitor key metrics and support business operations.
• Collaborate with security teams to develop and implement security monitoring solutions using Splunk, including SIEM configurations.
• Optimize the performance and scalability of the Splunk environment, including managing indexing and data retention policies.
• Integrate Splunk with other systems and applications, ensuring seamless data flow and log ingestion from various sources.
• Perform troubleshooting and resolution of issues related to Splunk performance, log ingestion, and data indexing.
• Develop and maintain Splunk apps and add-ons to enhance functionality and support specific use cases.
• Document the Splunk environment, including architecture diagrams, data flow, and configuration details, ensuring knowledge sharing across the team.
• Collaborate with cross-functional teams, including IT, security, and operations, to understand requirements and deliver effective log management solutions.
• Stay up-to-date with the latest Splunk features, best practices, and industry trends to continuously improve the Splunk environment.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 3+ years of experience as a Splunk Engineer or in a similar role, with a strong background in managing Splunk infrastructure.
• Proficiency in deploying and managing Splunk Enterprise, including indexers, forwarders, search heads, and clustered environments.
• Experience in creating custom dashboards, reports, and alerts using Splunk's search processing language (SPL).
• Strong understanding of log management, data ingestion, and indexing within Splunk.
• Familiarity with scripting languages such as Python or Bash for automation tasks.
• Experience with security monitoring and SIEM configurations using Splunk.
• Strong problem-solving skills and the ability to troubleshoot complex issues related to Splunk performance and data ingestion.
• Excellent communication and collaboration skills, with the ability to work effectively with cross-functional teams.
• Ability to work independently and manage multiple tasks in a fast-paced environment.