100% Remote: Splunk Consultant with Cribl

Splunk Consultant

100% Remote

12+ Months

Job Description:

Ideally SPLUNK with some Cribl / Data Pipelines capability.

Key Responsibilities:

• Onboard New Systems: Integrate new systems into the Splunk platform, ensuring seamless data ingestion and processing.
• Configure Syslog-ng: Set up and manage Syslog-ng configurations to facilitate efficient log collection and forwarding.
• Manage Indexes: Create and maintain indexes to optimize data storage and retrieval.
• Write Splunk Queries: Develop and optimize Splunk queries to extract meaningful insights from data.
• Documentation: Write comprehensive documentation for configurations, processes, and best practices.
• User Access Management: Manage user roles and permissions to ensure secure and appropriate access to Splunk resources.
• Review and Optimize Log Ingestion: Continuously monitor and analyze log ingestion processes to identify and implement optimizations, ensuring efficient and effective data collection.

Qualifications:

• Bachelors degree in Computer Science, Information Technology, or a related field.
• Proven experience as a Splunk Engineer or in a similar role.
• Strong knowledge of Splunk architecture and components.
• Experience with Syslog-ng configuration and management.
• Proficiency in writing and optimizing Splunk queries.
• Excellent documentation skills.
• Ability to manage user roles and permissions effectively.
• Strong analytical and problem-solving skills.
• Excellent communication and teamwork abilities.

Preferred Qualifications:

• Splunk certifications (e.g., Splunk Certified Admin, Splunk Certified Architect).
• Experience with other log management and SIEM tools.
• Familiarity with scripting languages (e.g., Python, Bash).