Splunk Developer - 4512

Splunk Developer

We are looking for an experienced Splunk Developer to join a leading SIEM team. This role involves onboarding and integrating log sources, developing dashboards and detection content, and building advanced solutions using Splunk, Python, and React. The ideal candidate is highly technical, innovative, and passionate about cybersecurity and data analytics.

Responsibilities

• Develop and maintain solutions on top of Splunk Enterprise / Splunk Cloud.
• Design, build, and optimize dashboards, alerts, reports, and saved searches.
• Create and maintain correlation rules and detection content.
• Improve and optimize existing dashboards, alerts, and searches.
• Integrate and onboard data sources using APIs, Syslog, HEC, and REST interfaces.
• Develop backend services and automation tools using Python.
• Build frontend applications and operational tools using React.
• Collaborate with Cyber Security, SOC, Infrastructure, and Engineering teams.

Requirements

• At least 3 years of hands-on experience with Splunk Enterprise or Splunk Cloud.
• Strong experience writing advanced SPL queries (joins, stats, tstats, transactions, lookups).
• Experience developing and maintaining:
• Dashboards
• Alerts and Reports
• Saved Searches
• Experience implementing Data Inputs (REST APIs, Syslog, HEC).
• Strong understanding of:
• Indexes
• Sourcetypes
• props.conf
• transforms.conf
• Experience with search optimization and performance tuning.

Backend Development (Python)

• 2–3+ years of Python development experience.
• Experience developing:
• Splunk Modular Inputs
• Automation and integration scripts
• Experience working with REST APIs, authentication mechanisms, and pagination.
• Strong knowledge of JSON, XML, data parsing, and normalization.
• Experience with Splunk Add-on Builder – an advantage.

Frontend Development (React)

• Experience with React development (Hooks, Components, State Management).
• Experience integrating REST APIs and asynchronous calls.
• Experience building internal tools and operational user interfaces.
• Strong knowledge of JavaScript ES6+, HTML, and CSS.
• Experience with UI libraries such as Material UI (MUI) or Ant Design – an advantage.

Advantages

• Experience with Splunk SOAR.
• Experience in Cyber Security, SIEM, or SOC environments.
• Experience integrating with:
• Cloud platforms (AWS, Azure, GCP)
• Security solutions (EDR, IAM, CI/CD)
• Experience with Git and CI/CD pipelines.
• Familiarity with Docker and Kubernetes.
• Experience working in large enterprise environments.

Education & Certifications

• Splunk certifications (Power User, Admin, Architect) – advantage.
• Academic degree in Cyber Security, Computer Science, Information Systems, or a related field – advantage.

Additional Requirements

• Full-time position.
• Strong problem-solving and analytical skills.
• Ability to work independently and as part of a team.
• Excellent interpersonal and communication skills.
• Availability to provide support outside regular business hours when required.
• Willingness to participate in written and verbal technical assessments as part of the recruitment process.