Splunk

Description

Splunk, a Cisco company, is building a safer and more resilient digital world with an end-to-end full stack platform made for a hybrid, multi-cloud world. Leading enterprises use our unified security and observability platform to keep their digital systems secure and reliable. Our customers love our technology, but it's our caring employees that make Splunk stand out as an amazing career destination. No matter where in the world or what level of the organization, we approach our work with kindness. So bring your work experience, problem-solving skills and talent, of course, but also bring your joy, your passion and all the things that make you, you. Come help organizations be their best, while you reach new heights with a team that has your back.

Role Summary

Do you want to make a difference in the security posture of an entire company? This role will be responsible for developing, fixing, and debugging internal deployments of Splunk products, such as Splunk Cloud Platform and SOAR. You will have a deep understanding of Information Security and software development principles coupled with a strong desire to learn and grow within the organization. This role will be part of the Splunk Security Center of Excellence team and will engage in problem solving, effectively elevating the internal customer experience, automating processes, and improving the reliability of our services. We are a passionate team who has fun, enjoys a good laugh but above all else thinks security first!

What you'll get to do

• Work closely with the Splunk Global Security (SGS) teams to improve existing automation and search initiatives that deliver resilient solutions
• Tap into your expertise of all things Splunk to address sophisticated issues
• Build and improve custom data onboarding scripts and add-ons for internal corporate tools and services
• Analyze internal metrics and workflows to reduce false positives and accurately focus engineering efforts
• Develop repeatable processes to build playbooks in order to efficiently resolve any incidents that arise
• Serve as initial support for internal customers and maintain high availability of playbooks.
• Implement validated security strategies related to our team’s Linux-based and AWS-based infrastructure, Python code, and containerized services

Must-have Qualifications

• Bachelor's degree with 5+ years of proven experience in Cybersecurity technologies with focus on one or more of the following areas such as SIEM, vulnerability management, firewalls, forensics, data logging, and IAM
• 2+ years of demonstrable experience in tool integrations, CI/CD and REST APIs as well as software development experience with Python, Golang, JavaScript, or similar
• Fully proficient in git and version control systems, like GitLab and GitHub
• Experience in Security Operations, SIEM, Incident Response, and Threat Intelligence
• Skilled in Linux administration and Cloud Technologies, such as AWS
• Excellent communication skills, both verbal and written; able to explain intricate technical topics to varying groups

Nice-to-have Qualifications

We’ve taken special care to separate the must-have qualifications from the nice-to-haves. “Nice-to-have” means just that: Nice. To. Have. So, don’t worry if you can’t check off every box. We’re not hiring a list of bullet points–we’re interested in the whole you.

• Splunk Certification in Architecture/Administration is desirable.
• Experience in Splunk ITSI and Observability cloud is desirable.

Splunk is an Equal Opportunity Employer

Splunk, a Cisco company, is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, national origin, genetic information, age, disability, veteran status, or any other legally protected basis.

Thank you for your interest in Splunk!