Job Description

Splunk Engineer

We are seeking a skilled and experienced Splunk Engineer to join our dynamic team. As a Splunk Engineer, you will be responsible for designing, implementing, and maintaining Splunk-based solutions that enable effective log management, monitoring, and analysis. You will collaborate with cross-functional teams to ensure the availability, security, and performance of our Splunk infrastructure while leveraging its capabilities to enhance operational efficiency and drive business insights.

Responsibilities

• Identification of business-critical systems within USAC infrastructure
• Identification of all systems within the USAC infrastructure; percent known and previously unknown
• Identification of current coverage (percentage) of business-critical systems with Splunk Forwarders
• Develop plan of action to provide more comprehensive coverage
• Identify required integrations (e.g., Nessus/Security Center, ServiceNow, Palo Alto)
• Make recommendations for additional optional integrations
• Identify current volume of audit data coming from business-critical systems
• Assess gap in current indexing capability
• Develop index clustering strategy
• Assess current needs for search head deployment
• Develop search head clustering strategy
• Identify user community and required roles
• Expand forwarder coverage to include non-critical endpoints and systems
• Identify potential free Splunk apps that provide basic security intelligence and limited view of compliance
• Identify potential dashboarding opportunities - simple to generate requirements for more complex alternatives or premium
• Perform integrations with existing business and security applications as requested
• Identify gaps to deploying Splunk ES and other premium application
• Identify opportunities for new dashboards and/or potential Splunk application development
• Threat intelligence ingest (free sources, initially)
• Investigate appetite for full security architecture assessment
• Other IT security support

Type of Experience

• Experience with storage technologies, platform administration on Linux and Windows and experience with many of today's security tool sets (IPS/IDS, AV, Firewalls, Switches, etc).

• Preparing and delivering information in a concise, professionally written format

• Preparing documentation on systems, processes or procedures, including network and workflow documents

• Preparing and presenting information on staff in a formal and informal setting

• Working in teams, task forces, etc.

Job Tags

Similar Jobs