Splunk Developer & Administrator

Role & responsibilities

Required Information Details

1 Role Splunk Developer & Administrator

2 Required Technical Skill Set Splunk, Python,Cribl

3 No. of Requirements 1

4 Desired Experience Range 8 to 10 years of experience

5 Location of Requirement

Desired Competencies (Technical/Behavioral Competency)

Must-Have 1. Strong knowledge of SPL (Search Processing Language). 2. Strong knowledge on IRs and Notables of SIEM and ITSI 3. Experience with onboarding data from various sources (syslog, APIs, cloud services, etc.). 4. Proficiency in scripting languages (Python, Bash, PowerShell). 5. Familiarity with DevOps tools (Git, Jenkins, Ansible, Terraform). 6. Should have good troubleshooting experience.

Good-to-Have Splunk certifications and Experience with Cribl and AppDynamics

SN Role descriptions / Expectations from the Role

1 Design, develop, and maintain complex Splunk dashboards, queries, and alerts.

2 Onboard new data sources into Splunk using forwarders, APIs, or custom scripts and Develop and maintain Splunk apps and technology add-ons (TAs).

3 Collaborate with security, infrastructure, and application teams to define logging standards and ensure data quality.

4 Optimize Splunk performance and manage indexing, parsing, and retention policies.

5 Implement and maintain role-based access controls (RBAC) and data models.

6 Support incident response and root cause analysis using Splunk.

7 Automate Splunk deployments and configurations using tools like Ansible, Terraform, or CI/CD pipelines.

8 Strong communication and collaboration skills.