Splunk Developer

Shift: 3:00 pm to 12:00 am

Work mode: Hybrid

Job Summary:

The Splunk Operations, Integrations and Development Specialist is responsible for building, operating, integrating, onboarding, and developing content within Splunk. The position requires the individual to be a highly knowledgeable Splunk application support and development along with comprehensive experience interacting with customers and building relationships. The Splunk Developer is responsible for creating and supporting a highly advanced Splunk application developed to support Enterprise System Activity Review (eSAR). eSAR is a critical business investment which supports privacy monitoring of critical care delivery applications. In this role, the candidate will work directly with an established team, and support Splunk development and administration using Agile project management methodologies.

The opportunity to join the Cyber Threat Systems team is available to the successful candidate able to engage on tasks independently, document and communicate their work efforts to a Scrum based project team and provide expert level technical support and Splunk development on an enterprise scale.

Essential Responsibilities

• Advise, manage, support an enterprise class Splunk environment.
• Support system administration activities on Linux OS and Splunk Enterprise and related applications
• Participate in production support activities of Splunk.
• Design Splunk system to meet growth while maintaining balance between performance/stability and agility.
• Develops advanced scripts for manipulation of multiple data repositories to support analyst requirements.
• Onboard and normalize new security and privacy event data into Splunk
• Develops advanced reports, dashboards or alerts to meet the requirements of critical initiatives.
• Develops scalable security management tools and processes.
• Develops automation supporting Splunk application and data management.
• Create customized searches and applications using programming/development skills such as java, python, shell scripting, regular expression etc.
• Automate deployment, integration and testing of enterprise system and services
• Communicate clearly to technical and business audiences
• Be well organized with a healthy sense of urgency, and able to set, communicate, and meet aggressive deadlines and milestones
• Self-motivated, learns quickly and delivers results with minimal supervision
• Quickly understand and interpret customer problem and navigate through complex organizations
• Represent the group in a friendly, courteous, and professional manner

Job Qualifications

• Bachelor's degree in Business Administration, Computer Science, Social Science, Mathematics, or related field and Minimum eight (8) years experience in IT or a related field
• Additional equivalent work experience of three years of work experience may be substituted for degree requirement, in addition to minimum years of experience (11 years total)
• Minimum two (2) years in information security or network engineering.
• Minimum 5+ years of experience with Splunk in an enterprise environment.
• Understanding of regular expressions and python development.
• Splunk Developer Certification(s)
• 5+ years of network security and system security experience, supporting security event management tools (SIEMs)
• Professional understanding and administrative knowledge of large-scale Linux/Unix deployments
• Understanding of enterprise logging & analytics platforms
• Working knowledge of code deployment and revision control software (i.e. Git)
• Infrastructure management and support experience
• System administration experience in a Windows and Unix environment
• Experience in using scripting languages to automate tasks and manipulate data.
• Experience working in a large enterprise environment
• Experience integrating solutions in a multi-vendor environment.

Preferred Qualifications

• Splunk Core Certified Consultant
• Splunk Enterprise Certified Architect