Splunk Engineer

RapidSoft established in 2003, with a mission of providing clients with experiened and talented resources in timely manner. We specialize in in Independent Verification and Validation, Test Automation and DevOps, Static Code Analysis.

Our Staffing division handles, niche staffing needs for companies of all sizes by providing technically prescreened resources thus reducing the hiring life cycle. Less Clutter of Resumes More Hires for clients.

Responsibilities:

• Support, admin, maintain, and expand Splunk infrastructure to meet future architecture design and deployment requirements
• Develop distributed Splunk applications, including requirement gathering, coordinating Splunk setup
• Recommended Splunk implementation best practices and fixes
• Design, implement, and optimize Splunk applications (to include Enterprise Security), queries, knowledge objects, and data models.
• Perform basic and advanced scripting tasks with Splunk to automate repeatable processes using Python
• Deploy Best Practices for developing Splunk Apps and create conceptual architecture for continuous improvement initiative
• Provide Impact assessment for migration efforts.
• Support Performance Testing and User Acceptance Testing
• Design and implement Custom Searches and reports
• Build proof of concepts for Splunk enhancements
• Tuning information model, defining reusable templates
• Define reusable view templates, and retention & archival policies
• Provide Impact assessment for migration efforts, and coordinate migration activities

Qualifications:

• 5+ years of overall IT experience
• 3 years’ experience in managing, designing, configuring Splunk environment
• 5 years’ experience in Unix environment including administration, scripting, or supporting applications
• Experience with Splunk Enterprise Security Premium Application and Splunk Enterprise.
• Experience in requirement gathering and documentation
• Experience in developing and supporting Splunk Applications
• Experience in automation with programming languages like Python, JAVA, .Net, Ansible is a plus
• Experience in technologies like GIT, JIRA, Automation Testing
• Familiarity with Phantom, Cloud computing, Web Interfaces, Databases, Big Data technologies (like Hadoop, Kafka etc)
• Understanding of Continuous Delivery and Continuous Integration
• Splunk Admin Certification is a plus
• Excellent communication and interpersonal skills
• Splunk core admin experience is a plus

Nice to Have:

• Experience in Security information and event management (SIEM)
• Experience with RTIR
• Certifications in CISSP, Python, Java, .Net, Ansible / Redhat or similar