Splunk Engineer

Splunk Engineer

This role is part of the Verizon Corporate Information Security (CIS) Data Management and Data Protection organization. The selected candidate will be joining the CIS Enterprise Log Management (ELM) team, which is responsible for logging and data collection, and Security Information and Event Management (SIEM) services enabling mission-critical security operations to protect the business.

The principal job role will be focused on internal service optimization to develop resilient and stable enterprise-scale SIEM services.

Key Responsibilities:

• Managing enterprise Splunk and large-scale logging and data collection technologies.
• Developing and optimizing Splunk Search Processing Language (SPL) to create dashboards, alerts, and reports.
• Deploying and managing Splunk Universal Forwarders, Heavy Forwarders, Splunk Deployment and Cluster Management Services, and License Management Services in enterprise-scale environments.
• Developing technical process and procedure documentation.
• Using Confluence or similar collaboration tools.
• Working support tickets with AYS and/or Jira or similar platforms.
• Comprehensive knowledge of common information technology topics including IP networking and Unix and Windows systems administration.
• Knowledge of common network security concepts including firewalls and identity and access management.
• Using shell scripting to perform basic systems administration tasks.
• Knowledge of how to use regular expressions.
• Ability to work independently with minimal supervision.
• Demonstrate excellent written and verbal communication skills to effectively communicate complex technical information.

Desired

Skills:

• Experience deploying and managing AWS and/or other cloud infrastructure services.
• Experience managing configuration files with Git code repository services.
• Experience using Jenkins and/or Ansible automation tools.
• Experience using Cribl, Kafka, and/or similar stream processor tools.