We’re looking for a Splunk Infrastructure Engineer to join our cyber infrastructure team. We want people who live and breathe data and enjoy diving into complex systems, with a clear understanding that our goal is to deliver accurate data for the organization’s cybersecurity and defense capabilities.
What will we work on together?
- Operation, administration, and ongoing monitoring of Splunk servers.
- End-to-end ownership of Data Onboarding, normalization, and CIM mapping — ensuring cyber teams receive the highest-quality information in real time.
- High-level troubleshooting — identifying and investigating issues, including deep analysis of internal logs (index _internal) and monitoring REST API mechanisms.
- Pipeline optimization, performing upgrades and server maintenance while working closely with IT and cyber teams.
What should you bring?
- 3+ years of experience deploying, operating, and administering Splunk systems.
- Hands-on, in-depth experience with log ingestion, parsing, and field extraction.
- Deep familiarity with Splunk architecture and advanced troubleshooting capabilities.
- Full proficiency with Regex and solid understanding of data normalization processes.
- Broad knowledge of Linux and Windows operating systems and experience scripting (Bash or PowerShell).
If you’re looking for a significant technical challenge behind the scenes of the cyber world and want to directly impact the organization’s defense capabilities — please send your CV.