We are looking for a Splunk Engineer to design, deploy, manage, and support Splunk environments for security monitoring, IT operations, and log analytics. The role involves onboarding data sources, building dashboards and alerts, troubleshooting ingestion issues, and supporting SIEM use cases.
Key Responsibilities - Deploy, configure, and maintain Splunk Enterprise and/or Splunk Cloud.
- Onboard logs from servers, network devices, firewalls, security tools, applications, and cloud platforms.
- Create and optimize Splunk searches, reports, dashboards, alerts, and correlation rules.
- Support SIEM use cases including threat detection, incident investigation, and compliance monitoring.
- Manage Splunk forwarders, indexers, search heads, deployment servers, and clustering where applicable.
- Troubleshoot data ingestion, parsing, indexing, search performance, and access issues.
- Develop field extractions, source types, CIM mappi...