Splunk Engineer

Splunk Engineer

Required Skills & Experience
• Bachelor's degree in Computer Science, Information Security, or related field
• 5+ years of hands-on experience with Splunk engineering and architecture
• Deep understanding of Splunk components (Universal Forwarder, Heavy Forwarder, Search Head Clustering, Indexer Clustering)
• Strong knowledge of SPL (Search Processing Language) and data modeling
• Experience with Linux/Unix systems and cloud platforms (AWS, Azure, GCP)
• Familiarity with cybersecurity frameworks (MITRE ATT&CK, NIST, etc.)
• Scripting skills in Python, Bash, or Power Shell
• Excellent communication and documentation skills

Nice to Have Skills & Experience
• Splunk certifications (e.g., Splunk Certified Architect, Splunk Certified Admin)
• Experience with Splunk Enterprise Security (ES) or IT Service Intelligence (ITSI)
• Knowledge of SOAR platforms and integration workflows
• Experience with log aggregation tools (e.g., ELK, Graylog)
• Familiarity with containerized environments (Docker, Kubernetes)

Job Description

We're seeking a highly skilled Splunk Engineer to lead the design, deployment, and optimization of our Splunk ecosystem. This role is ideal for someone who thrives at the intersection of data engineering, cybersecurity, and operational intelligence. You'll architect scalable solutions, develop custom dashboards, and empower teams with actionable insights from machine data. Key Responsibilities

• Architecture & Design:
  Lead the end-to-end design of Splunk infrastructure, including indexers, forwarders, search heads, and clustering strategies
• Data Onboarding:
  Integrate diverse data sources (syslogs, APIs, cloud logs, etc.) into Splunk using best practices for parsing, normalization, and enrichment
• Dashboard & Alert Development:
  Build advanced dashboards, reports, and alerts tailored to security, IT operations, and business analytics
• Performance Optimization:
  Tune Splunk queries, indexes, and configurations for speed, scalability, and cost-efficiency
• Security & Compliance:
  Implement role-based access controls, data retention policies, and audit mechanisms to meet regulatory requirements
• Automation & Integration:
  Develop scripts and automation (Python, Bash, etc.) to streamline Splunk operations and integrate with other tools (e.g., SOAR, SIEM, ticketing systems)
• Mentorship &
  
  Collaboration:
  
  Guide junior engineers, collaborate with SOC analysts, and partner with infrastructure teams to maximize Splunk's value
• Troubleshooting & Support:
  Provide Tier 3 support for Splunk-related issues and lead root cause analysis for data ingestion or performance problems