Splunk Developer

Company Description

ONE datAI, a division of One Technologies, is a leading provider of comprehensive Data and AI solutions in Israel. Since 2006, our team of over 200 experts has been helping organizations transform complex data challenges into strategic opportunities. We specialize in areas such as data infrastructure, data engineering, analytics (BI), automation, and AI/ML solutions. Our expertise spans various industries including finance, retail, healthcare, transportation, and more. Trusted by top organizations, innovation and excellence are at the core of everything we do.

We are looking for a Splunk Developer to join a SIEM / Cyber team in a financial organization.

The role includes developing and maintaining Splunk-based solutions, building advanced dashboards, alerts and reports, integrating data sources, and supporting automation and internal tools.

Key Requirements

3+ years of hands-on experience with Splunk Enterprise / Splunk Cloud

Strong experience writing complex SPL queries

Experience developing and maintaining Dashboards, Alerts, Reports and Saved Searches

Experience with Data Inputs such as REST APIs, Syslog and HEC

Familiarity with Indexes, Source types, props.conf and transforms.conf

Experience with search optimization and performance tuning

2–3 years of backend development experience in Python

Experience with Splunk Modular Inputs, automation scripts and integrations

Experience working with REST APIs, JSON, XML, parsing and data normalization

Frontend experience with React, including Hooks, Components and State Management

Familiarity with JavaScript ES6+, HTML and CSS

Advantage: Splunk SOAR, Cyber / SIEM / SOC, Cloud platforms, Git, CI/CD, Docker or Kubernetes