Splunk Engineer

About the Opportunity 

Cloud Security Services is currently looking for  a highly skilled and experienced Splunk Engineer to join our team. As a Splunk Engineer, you will be responsible for designing, implementing, and maintaining our Splunk environment to enable effective log management, monitoring, and analysis. You will collaborate closely with cross-functional teams to gather requirements, configure data inputs, create dashboards and reports, and develop customized solutions to meet the organization's operational and security needs. The ideal candidate should possess strong technical expertise in Splunk administration, data onboarding, search optimization, and Splunk app development. Additionally, you should have a deep understanding of log management best practices, security frameworks, and industry compliance standards. Strong problem-solving skills, attention to detail, and the ability to work in a fast-paced environment are essential for success in this role. 

Qualifications & Requirements:

• Knowledge of Splunk Core, Splunk Enterprise Security
• Very knowledgeable Search Processing language (SPL) Programmer Ability to create advanced Splunk queries to mine data
• Splunk SIEM and various data sources Splunk integration with ticketing system (Atlassian JIRA) and BMC Remedy, Service Now
• Splunk Dashboard & UI development for security metrics
• Experience with other Splunk Solutions (UBA, RBA, Phantom, etc)
• Experience with Security Operations Center (SOC) functions

BASIC/MINIMUM QUALIFICATIONS

• Bachelor's degree (BA/BS) from four-year college or university; or equivalent training, education, and work experience
• Minimum of Five (5) years of Systems Engineering experience
• Minimum of Five (5) years of experience working with Splunk and large database repository environments
• At least Five (5) years of experience working with hardware and network related services operating at layers 1 - 3 of the OSI

PREFERRED QUALIFICATIONS

• Splunk Phantom SOR experience
• Splunk ES Certified Admin
• Certified Linux Administrator
• Experience working within financial industry SOC
• Database admin certification
• Vendor related network certifications
• Graduate degree or high level of technical certifications.