Senior Splunk Engineer

Posted 15ds ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Senior Splunk Engineer serving as a Subject Matter Expert (SME) in cybersecurity initiatives. Designing and maintaining enterprise-level Splunk environments across on-premise and cloud-based infrastructures.

Responsibilities:

  • Design, deploy, and maintain large-scale on-premises and cloud-based Splunk environments to support enterprise monitoring and security alerting.
  • Manage knowledge objects (fields, extractions, tags, event types, lookups, macros) and oversee configuration files (.conf and .cfg) across recent Splunk Enterprise versions.
  • Analyze and resolve complex data ingestion and parsing issues to ensure accurate data flow and integrity.
  • Create and optimize complex Splunk queries (SPL), dashboards, and alerts to support security and operational objectives.
  • Develop automation workflows and dashboard interfaces to streamline operations and reduce manual overhead.
  • Utilize REST APIs to integrate Splunk with external systems and cloud platforms.
  • Collaborate with cross-functional teams (DevOps, Security) and provide mentorship and technical guidance to junior team members.
  • Perform upgrades, patching, and performance tuning; participate in off-hours and weekend maintenance efforts as required.

Requirements:

  • 5+ years of hands-on experience with Splunk Enterprise in a large-scale environment.
  • Proficiency in Splunk system architecture, deployment, and configuration management.
  • Advanced ability to write complex queries for dashboards, alerts, and reporting.
  • Strong capability in troubleshooting data ingestion, parsing, and onboarding logs.
  • Experience using REST APIs for Splunk and third-party system integrations.
  • Strong problem-solving abilities, service-oriented mindset, and the ability to articulate technical concepts to non-technical audiences.
  • Advanced administration and troubleshooting skills in Unix/Linux and Windows environments.
  • Strong scripting skills in Bash, Python, JavaScript, SQL, or PowerShell for automation tasks.
  • Experience integrating Splunk with AWS, GCP, or Azure.
  • Understanding of NIST, FISMA, and FedRAMP controls, as well as role-based access control (RBAC) implementation.
  • Experience with the Splunk App for Data Science/Deep Learning, Splunk SOAR, or Splunk AI Assistant.
  • Previous experience in Cybersecurity, Network Administration, or Observability industries.

Benefits:

  • Insurance - health, dental, and vision
  • Paid Time Off (PTO) and 11 Federal Holidays
  • 401(k) employer match

Dragonfli Group

IT Services and IT Consulting

CyberSecurity as a Solution: Enabling Secure Business.

View all jobs at Dragonfli Group

Report this job

Job expired or something wrong with this job?