Job Description
– **Only Locals to VA,MD,DC States**
– **Looking for 10+ Years exp**
– **On C2C Through employers we are accepting only H1B**
**Position: Splunk Enterprise Security Engineer/Developer III**
**Location: Reston, VA – Hybrid – Weekly 3 days ONSITE**
**Duration: Long Term**
Description:
We are seeking a skilled and proactive Splunk Engineer to join our Information Security Engineering team. This role is responsible for managing and optimizing our Splunk environment, developing dashboards, integrating logs, and supporting enterprise security initiatives. The ideal candidate will have strong troubleshooting skills, experience with performance tuning, and a solid understanding of AWS and Python scripting. He/She should have Developer and Admin Experience.
**Core Responsibilities:**
Troubleshooting Splunk Issues
Diagnose and resolve performance, indexing, and search-related problems.
Monitor Splunk health and optimize system reliability.
Dashboard Development:
– Design and implement custom dashboards using Splunk’s visualization tools.
– Translate business requirements into actionable insights.
– Performance Tuning
– Optimize search queries and indexing strategies.
– Improve data ingestion and system responsiveness.
– Address Vulnerability
Managing Enterprise Security
– Utilize Splunk Enterprise Security (ES) for threat detection and incident response.
– Develop correlation searches and risk-based alerting.
– Log Integration with Splunk
– Onboard logs from various sources (servers, cloud platforms, applications).
– Normalize and parse data using props and transforms.
Preferred Skills:
– AWS Knowledge
– Experience integrating AWS services (CloudTrail, CloudWatch, S3, etc.) with Splunk.
– Familiarity with cloud architecture and security best practices.
– Scripting Experience (Python)
– Automate Splunk tasks and data processing using Python.
– Develop custom scripts for data enrichment and API integrations.
– Professional certification(s) desired