Splunk Developer for leading Company! 5379

About the Role:

We are looking for a highly skilled Splunk Developer to join our SIEM team. In this role, you will be responsible for end-to-end data onboarding, connecting log sources, and creating advanced content, including dashboards developed with React. We are seeking a candidate with high technical capabilities, "out-of-the-box" thinking, and extensive experience with the Splunk platform.

Key Responsibilities:

• Develop and implement solutions on top of the Splunk infrastructure.
• Design and build advanced dashboards and visualizations.
• Develop, maintain, and optimize correlation rules, alerts, and reports.
• Perform continuous tuning and optimization of existing content to ensure high performance.

Requirements:

• Splunk Expertise:
• At least 3 years of experience working with Splunk Enterprise or Splunk Cloud.
• Hands-on experience writing complex SPL (including joins, stats, tstats, transactions, and lookups).
• Development and maintenance of advanced Dashboards, Alerts, Reports, and Saved Searches.
• Proven experience in implementing Data Inputs (REST, APIs, Syslog, HEC).
• Deep understanding of Splunk internals: Indexes, sourcetypes, props.conf, and transforms.conf.
• Strong focus on Performance Tuning and Search Optimization.
• Backend Development – Python:
• 2–3 years of experience in Python development.
• Experience developing Splunk Modular Inputs.
• Experience writing scripts for automation and integrations.
• Proficient in working with REST APIs (requests, auth, pagination).
• Experience with data parsing and normalization (JSON, XML).

Advantages:

• Experience with the Splunk Add-on Builder.

Frontend development experience with React.

#Splunk #SIEM #CyberSecurity #Python #SplunkDeveloper #SecurityOperations #TechJobs