Full-Time Splunk Engineer

True Zero Technologies, a veteran-owned small business, prioritizes people and technology for superior outcomes.

The Splunk Engineer will join a team supporting various client Splunk instances, focusing on data onboarding, content development, reporting, and visualizations.

Qualifications:

• Prior Splunk engineering and administration experience
• Splunk Consultant Certification
• Strong Splunk ES experience
• Log ingestion experience via Cribl
• RBA experience
• Alert and workflow development for Splunk as a SIEM
• App and Knowledge Object (KO) development (dashboards, reports, data models)
• Collaboration with Splunk Architect/Admin
• Training/support to CISO Splunk Engineering team on data lifecycle
• Supporting CISO teams and analysts on searching and content development
• Automation development for CISO workflows
• Advanced Splunk security use cases
• Risk rule and risk incident rule development
• Custom dashboards for RBA
• Incident response and remediation workflows
• Custom machine learning models for anomaly detection
• Event logging from various sources (operating systems, applications, identity providers, network infrastructure, cloud services)
• Understanding of network protocols, operating systems, applications, and device event telemetry

Benefits:

• Competitive salary (paid bi-monthly)
• Best-in-class medical coverage (100% premium coverage)
• New business incentive programs
• Contribution incentives (white papers, blogs, webinars)
• 3 weeks PTO + 11 paid holidays
• 401k program (100% company match on first 4%)
• Monthly cell phone and home internet reimbursement
• Paternity/maternity leave
• Training and certification support

What is the last date for applying to the job?

Which countries are accepted for this remote job?