Splunk Development & Administration Cyber Security Analyst

• Implement and manage Splunk applications and add-ons version upgrades and lifecycle management
• Perform data onboarding, parsing, normalization, and STIX-based input/output integration
• Design, develop, optimize, and troubleshoot Splunk dashboards, searches, alerts, and reports
• Manage and optimize Splunk configurations
• Monitor and maintain Splunk infrastructure components
• Investigate incidents, perform root cause analysis (RCA), resolve operational issues
• Execute controlled deployments of Splunk apps, add-ons, knowledge objects
• Collaborate with application teams, data owners, and analysts
• Configure and support integrations with enterprise platforms
• Handle user provisioning, RBAC access management, and security governance
• Monitor indexing latency, ingestion rates, storage utilization, and platform health
• Automate routine administrative and operational tasks
• Support CI/CD pipelines implementation and DevSecOps practices
• Work collaboratively with cross-functional teams
• Create and maintain technical documentation, operational procedures
• Apply understanding of Splunk architecture, distributed deployments, CIM, SIEM concepts, and ITIL best practices
• Utilize technical knowledge in Linux, Windows, SQL Server, REGEX, SPL, XML, JavaScript, Python, Agile methodologies
• Contribute to continuous improvement initiatives

• Implement and manage Splunk applications and add-ons version upgrades and lifecycle management
• Perform data onboarding, parsing, normalization, and STIX-based input/output integration for security and compliance use cases
• Design, develop, optimize, and troubleshoot Splunk dashboards, searches, alerts, and reports
• Manage and optimize Splunk configurations including inputs.conf, props.conf, transforms.conf, and other deployment configurations
• Monitor and maintain Splunk infrastructure components such as Indexers, Search Heads, Forwarders, and Cluster environments
• Investigate incidents, perform root cause analysis (RCA), resolve operational issues independently
• Execute controlled deployments of Splunk apps, add-ons, knowledge objects, and configuration changes across environments
• Collaborate with application teams, data owners, and analysts for onboarding, validation, troubleshooting, and optimization of log sources
• Configure and support integrations with enterprise platforms including ServiceNow, AWS, Azure, GCP, DB Connect, ITSI, Akamai, ServiceNow, Okta Identity
• Handle user provisioning, RBAC access management, and security governance within Splunk environments
• Monitor indexing latency, ingestion rates, storage utilization, and overall platform health
• Automate routine administrative and operational tasks using Bash, Python, PowerShell, and scripting techniques
• Support CI/CD pipelines implementation and DevSecOps practices using tools such as GitHub, Jenkins, and cloud-native integrations
• Work collaboratively with cross-functional teams and other projects
• Create and maintain technical documentation, operational procedures, deployment guides, and knowledge base articles
• Apply strong understanding of Splunk architecture, distributed deployments, CIM, SIEM concepts, and ITIL best practices
• Utilize technical knowledge in Linux, Windows, SQL Server, REGEX, SPL, XML, JavaScript, Python, Agile methodologies, and architectural design principles
• Contribute to continuous improvement initiatives, operational excellence, and monitoring best practices across the Splunk ecosystem
• B.E. /B Tech in IT or Computer Engineering
• Total Experience Expected: 04-06 years
• Splunk Core Certified User / Splunk Core Certified Power User
• Splunk Enterprise Certified Admin
• Splunk Cloud Certified Admin
• To be able to work in European Shifts or 24/7

experience of development

• Inclusive and respectful work environment
• All positions are open to people with disabilities