DigiTran Technologies Inc. · 3 hours ago
Splunk Cyber Security
DigiTran Technologies Inc. is seeking a Splunk Subject Matter Expert with strong Engineering skills to join their dynamic team. The ideal candidate will be responsible for designing, deploying, and maintaining on-premises and cloud-based Splunk environments to support enterprise-level monitoring, alerting, and reporting.
Responsibilities
Designing, deploying, and maintaining on-premises and cloud-based Splunk environments to support enterprise-level monitoring, alerting, and reporting
Collaborating across DevOps, Security, and IT teams to optimize performance, ensure data integrity, system availability and support mission-critical operations
Managing knowledge objects (fields, extractions, tags, event types, lookups, workflow actions, aliases, macros, and so on) through automations, scripting, management server functions
Writing complex Splunk queries, dashboards, and alerts using SPL (Search Processing Language)
Analyzing and troubleshooting complex data ingestion and parsing issues
Designing and developing an automations workflow and dashboard interface
Taking action, finding ways to solve problems, and moving projects to conclusion independently
Mentoring and guiding junior researchers or team members
Executing new projects as well as data and user onboarding
Qualification
Required
5+ Years of Splunk Experience Required
Manages knowledge objects (fields, extractions, tags, event types, lookups, workflow actions, aliases, macros, and so on) – through automations, scripting, management server functions; to include .conf and .cfg files in scope of the last four Splunk Enterprise versions
Experience with Splunk deployment and configuration management in large-scale environments
Proficiency in writing complex Splunk queries, dashboards, and alerts using SPL (Search Processing Language)
Experience with REST APIs for Splunk and external system integration
Ability to analyze and troubleshoot complex data ingestion and parsing issues
Designing and developing an automations workflow and dashboard interface for such
Self-starter with a service-oriented mindset who will take action, find ways to solve problems, and move projects to conclusion independently
Strong problem-solving skills and the ability to translate research insights into practical solutions that address real-world challenges
Strong communication and collaboration skills with the ability to articulate complex technical concepts to both technical and non-technical audiences
Experience in mentoring and guiding junior researchers or team members
A minimum of eight (8) to twelve (12) years' relevant experience
A degree from an accredited College/University in the applicable field of services is required. If the individual's degree is not in the applicable field then four additional years of related experience is required
Typically performs all functional duties independently
Preferred
Ability to leverage the Splunk AI Assistant and other AI tools to increase accuracy and efficiency of task and other deliverables
Advanced knowledge of Unix/Linux and/or Windows systems administration and troubleshooting
Strong scripting skills in Bash, Python, JavaScript, SQL and PowerShell for automation and integration tasks
Experience with Splunk upgrades, patching, and performance tuning
Proficiency in integrating Splunk with cloud platforms (AWS, GCP, Azure)
Understanding of security and compliance requirements and implementation of role-based access controls (RBAC) in Splunk
Strong knowledge of logging standards and best practices across application and infrastructure layers
Extensive knowledge of defense-in-depth principles, Network and Security architecture, network topology, IT device integrity, and common security elements
Executes new projects as well as data and user onboarding
Strong understanding of IT and Cyber industry standards and technologies to include such controls governed by NIST, FISMA, and FedRamp
Experience installing and utilizing and developing with the Splunk App for Data Science and Deep Learning
Experience installing and utilizing and developing with the Splunk SOAR Automation toolset
Experience or background in the Cybersecurity, Systems/Network Administration or Observability industry
Company
DigiTran Technologies Inc.
DigiTran Technologies (aka DigiTran) leverages its extensive technical, and complex federal government domain-specific expertise, and innovative transformation experience to serve the US businesses.