Splunk Engineer

Your work profile.

Key Responsibilities (Project-Specific)

• Splunk Infrastructure Management: Maintain and optimize Splunk environments (on-premise and cloud).
• Ensure consistent and reliable log ingestion from diverse systems and applications.
• Data Onboarding & Management: Define and implement data onboarding processes, field extractions, and normalization.
• Collaborate with asset-owning teams to ensure forwarder coverage and log completeness.
• Alerting & Dashboards: Create and maintain dashboards and custom SPL queries for operational visibility.
• Ensure accuracy and effectiveness of alerting mechanisms within Splunk.
• Troubleshooting & Support: Investigate and resolve issues related to Splunk alerts and data ingestion.
• Provide solutions and recommendations for improving system performance.
• Automation & Documentation: Assist in developing automation tools for efficient Splunk management.
• Document procedures, configurations, and architectural changes.

Education

Required Skill Set

• Proficiency in Splunk Query Language (SPL) for creating searches, alerts, and dashboards.
• Experience with Splunk data onboarding, field extractions, and log normalization.
• Familiarity with AWS Cloud environments and integration with Splunk.
• General scripting knowledge (Python preferred) for automation and tooling.
• Strong troubleshooting skills and ability to resolve complex Splunk-related issues.
• Experience collaborating with cross-functional teams in enterprise environments.
• Strong documentation and communication skills.
• Ability to manage time effectively and meet operational goals.