Senior Splunk Security Engineer

• Proficiency managing Splunk using configuration files

• Experience onboarding data into Splunk via forwarder, scripted inputs, TCP/UDP and modular inputs from a variety of sources.

• Proficiency onboarding data using Splunk developed add-ons for Windows, Linux, and common third-party devices and applications

• Experience collaborating with separate engineering teams to configure data sources for Splunk integration

• 5+ Years experience in Linux, Windows and SQL/ODBC interfaces

• Proficiency implementing and onboarding data in Splunk DB Connect

• 3+ Years experience in app interface development, using REST API’s

• Experience with Splunk performing systems administration, including performing installation, configuration, monitoring system performance and availability, upgrades, and troubleshooting

• Experience developing in XML, Bash, JavaScript and Python, Perl, PowerShell scripts

• General networking and security troubleshooting (firewalls, routing, NAT, etc.)

• Splunk architecture/design, implementation, and troubleshooting experience

• Experience in managing, maintaining, and administering multi-site indexer cluster

• Scripting and development skills (BASH, python, or java) with strong knowledge of regular expressions

• Proficiency developing log ingestion and aggregation strategies per Splunk best practices

• Proficiency normalizing data to Splunk Common Information Model (CIM)

• Experience implementing and optimizing Splunk data models

• Expertise developing security-focused content for Splunk , including creation of complex threat detection log and operational dashboards

• Perform integration activities to configure, connect, and pull data with 3rd party software APIs.

• Ability to autonomously prioritize and successfully deliver across a portfolio of projects

• Undertakes day-to-day operational and user support

• The candidate shall have bachelor’s degree in Computer Science, Engineering , or related field and a minimum of 8 years of experience in system administration, database administration, network engineering , software engineering , or software development, with a concentration in Cybersecurity. At least one of the following certifications: CASP, GCIH, GCWN, GISF, GISP, GSSP, GICSP, GSSP, SEI, CISSP, CCSP, CSSLP, SSCP, CCNP, CCNP Security, CCIE Security, CEH, ECSP, MCSE, RHCA, RHCE, VCP, VCAP, VCIX, VCDX

• Current Splunk Enterprise Certified Architect certification