Splunk Specialist

Job Description:

Tasks/Duties:

• Communicate with stakeholders at all stages of the project cycle to understand requirements and explain limitations
• The Splunk Specialist is responsible for the design, development, and implementation of the Splunk infrastructure as well as support operations activities.
• The candidate should be proficient with recognizing and onboarding new data sources into Splunk, analyzing the data for anomalies and trends, and building dashboards highlighting the key trends of the data. The Splunk engineer should be proficient within a Linux environment, editing and maintaining Splunk configuration files and apps.
• The selected candidate will assist with providing engineering, and administration in supporting a very large distributed clustered Splunk environment consisting of search heads, indexers, deployers, deployment servers, heavy/universal forwarders, and Splunk Enterprise Cloud premium app, spanning security, performance, and operational roles.
• The Splunk engineer will assist the Enterprise Splunk team, and Cybersecurity Engineering team members and will be required to interact with end-users to gather requirements, perform troubleshooting, and aid with the creation of Splunk search queries and dashboards. The Splunk engineer will be required to interact with management, as necessary.

Core Skills:

• 5+ yrs. of exp in Splunk Administration/ Architect.
• Exposure in Cloud architecture.
• Detailed understanding of Splunk Deployment Methodology and best practices for planning, data collection, sizing for a distributed deployment and Splunk Apps & Plugins. Hands-On knowledge of optimizing Splunk Knowledge objects and components. Extensive experience with all Splunk Components like UF, HF, Indexers & SHs. Communication & integration between them and other toolsets/Datasets.
• Expert in Splunk Administration, Implementation and Troubleshooting Splunk environment.
• Performs Spunk platform architecture and administration. Monitors security operations and code development. Performs onboarding for new security clients, such as schools and departments.
• Develops and manages data, system, and network security architecture.
• Coordinates the enforcement and audits of security policies and procedures such as access, breach escalation, use of firewalls, and encryption routines.
• Coordinates the administration and monitoring of data security profiles on all platforms, audits, reviews of security violation reports, and investigations of security exceptions, Coordinates investigations of possible security violations and the completion of investigation reports.
• Coordinates IT security incident responses to include, responding to reported machine compromises, and interacting with law enforcement agencies Coordinates the development of risk analysis scenarios and response procedures, Coordinates and monitor the updates, maintenance, and documentation of security controls, Coordinates and monitors the direct support to the client and internal IT groups for security-related issues.
• Oversees and coordinates the advice given to technical staff, policy administrators, and clients on.
• the integrity of security procedures, systems, and policies in the design of systems and facilities.
• Oversees the process used to document/log information security, Incidents, responses, plans, methods, and procedures. Monitors and audit security documentation and logs.

Requirement:

• Excellent communication skill in English and open to work mostly during Central European hours.
• Experience of working in Agile delivery.
• Proven ability to work creatively and analytically in a problem-solving environment.
• Proven ability to work independently.
• Certified: Microsoft Fundamentals, Splunk Certified Developer, Splunk Enterprise Certified Architect and Splunk Cloud Certified Admin.