Splunk Enterprise Security Expert
New
J
JobgetherCybersecurity / IT
IndiaFull-TimeSenior
Salary60 USD per hour
Apply NowOpens the employer's application page
Job Details
- Experience
- 8+ years of hands-on Splunk experience in enterprise environments.
- Required Skills
- PythonBashCI/CDLinuxGitHub Actions
Requirements
- Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or equivalent experience.
- 8+ years of hands-on Splunk experience in enterprise environments.
- 3+ years of direct experience in Splunk knowledge management, CIM normalization, or SIEM content engineering.
- Experience with large-scale deployments handling 20+ TB of data per day.
- Deep expertise in Splunk Enterprise Security, including correlation searches and risk-based alerting.
- Advanced proficiency in SPL, including complex statistical pipelines, macros, and sub-searches.
- Strong understanding of Splunk data models, acceleration strategies, and Pivot functionality.
- Experience with CI/CD pipelines, GitHub, GitHub Actions, and version-controlled content promotion.
- Proficiency in Python and Bash/Shell scripting for automation.
- Strong Linux and Windows administration knowledge.
- Familiarity with cloud telemetry (AWS, Azure, GCP) and MITRE ATT&CK framework.
- Splunk Core Certified Consultant, Enterprise Security Certified Admin, or Certified Architect preferred.
Responsibilities
- Provide centralized governance and lifecycle management for Splunk knowledge objects.
- Establish and enforce enterprise-wide naming conventions, taxonomy standards, and lifecycle processes.
- Develop automation to monitor data ingestion, data flow consistency, and normalization drift.
- Lead the promotion of knowledge objects through development, testing, staging, and production using CI/CD and GitOps.
- Serve as the enterprise authority for Splunk Common Information Model (CIM) normalization.
- Design and maintain Splunk data models supporting Enterprise Security correlation searches and analytics.
- Collaborate with cross-functional teams to define permission structures and sharing models.
- Create and maintain technical documentation, standards guides, and operational runbooks.
View Full Description & ApplyYou'll be redirected to the employer's site
