Sr Splunk Administrator

Must Have Skills

• 5+ years of experience with Splunk
• Splunk certification
• Experience designing, implementing, and supporting Splunk core components—including indexers, forwarders, search heads, and cluster managers
• Experience configuring and administering Splunk ingestion and forwarding for new and existing applications and data
• Experience troubleshooting Splunk data‑flow issues between core components
• Experience configuring and deploying data collection for a variety of operating systems and network platforms
• Experience creating dashboards and analytics within SIEM tools
• Experience working with monitoring systems that support auditing, incident response, and system health
• Understanding of networking components, devices, ports, protocols, and basic networking troubleshooting steps
• Ability to troubleshoot issues with log feeds, search time, and field extractions

• Ability to articulate dashboards through presentations
• Excellent written and verbal communication skills

• Bachelor’s Degree in Computer Science, Engineering, Information Security, or a related discipline
• Splunk certification

• Design, maintain, and troubleshoot the SIEM environment
• Develop advanced SIEM correlation rules, reports, and dashboards to detect emerging threats
• Manage, develop, and tune scripts that integrate with the SIEM
• Design and generate data parsers as needed to optimize ingestion from a wide variety of devices, including servers, firewalls, and cloud applications
• Maintain comprehensive documentation of security controls, policies, and procedures for the SIEM environment
• Create workflows for incident response within a SIEM tool
• Assist with incident response and cyber investigations

Department:
Preferred Vendors
This is a contract‑to‑hire position.