Job Details

Content Development & Optimization

• Build, maintain, and optimize Splunk dashboards, alerts, and reports that give teams real-time, actionable visibility.
• Create, modify, and troubleshoot complex multi-layer searches and dashboards using advanced SPL commands, macros, and search chaining.
• Continuously evaluate and improve existing content for clarity, performance, and value.
• Write efficient searches and troubleshoot poorly written or misconfigured queries.
• Analyze complex data sets and convert them into actionable insights.

• Develop and manage data models that support scalable, high-performance content.
• Design and implement ingestion solutions via APIs, scripted inputs, and Universal Forwarders.
• Monitor log ingestion rates and ensure data consistency and reliability.
• Ensure logs are compliant with the Common Information Model

• 3+ years of experience developing Splunk content in a professional environment.
• Experience writing and optimizing SPL queries and visualizing complex data.
• Familiarity with scripting languages like Bash, Python or PowerShell to support Splunk functions.
• Strong understanding of log data formats and structures including JSON, XML, Syslog, and CSV.
• Linux administration related to Splunk
• Familiarity with integrating Splunk with other tools and platforms within the IT ecosystem.
• Understanding of networking and systems concepts and security fundamentals.
• Ability to manage multiple tasks and projects simultaneously, ensuring timely delivery of Splunk solutions.
• Familiarity with Security Operations Centers.