Splunk and Data Specialist

Position Overview

We are seeking a highly skilled Splunk Specialist to join our technology team. This role will be responsible for designing, developing, and maintaining advanced Splunk dashboards, reports, and alerts, while also leading Splunk integrations across enterprise systems. The ideal candidate will have strong expertise in Splunk Core, Enterprise Security, and integrations via APIs and connectors, with the ability to translate business requirements into actionable data solutions.

Key Responsibilities

• Splunk Development (Dashboards & Reporting):
• Design, build, and optimize Splunk dashboards, reports, alerts, and visualizations for IT, security, and business stakeholders.
• Work with business units to understand KPIs and monitoring needs and translate them into actionable Splunk searches.
• Implement best practices in SPL (Search Processing Language) to ensure efficient, high-performing queries.
• Create scheduled reports and alerts to proactively notify stakeholders of anomalies or threshold breaches.
• Data analytics and working with the data team on Observability projects .
  
  

Splunk Integrations & Engineering:

• Develop and maintain data onboarding pipelines (universal/heavy forwarders, API connectors, syslog feeds, DB inputs, cloud integrations).
• Integrate Splunk with third-party platforms (e.g., ServiceNow, AWS, Azure, GCP, security appliances, DevOps tools).
• Ensure data normalization and CIM (Common Information Model) compliance across all sources.
• Work closely with infrastructure and DevOps teams to implement Splunk apps, add-ons, and custom scripts for integration.
  
  

Operations & Support:

• Support end-users by troubleshooting search, dashboard, and report issues.
• Assist with capacity planning, scaling, and performance tuning of the Splunk environment.
• Maintain proper documentation, runbooks, and integration diagrams.
• Contribute to automation initiatives (e.g., using REST APIs, Python, or PowerShell to automate ingestion and reporting).
  
  

Required Skills & Experience

• 3-5+ years of hands-on Splunk experience (Splunk Enterprise, Splunk Cloud, or both).
• Proven expertise in SPL (Search Processing Language), dashboard design, and report creation.
• Strong knowledge of data ingestion techniques: forwarders, APIs, syslog, DB Connect, cloud services.
• Experience with Splunk Enterprise Security (ES) or IT Service Intelligence (ITSI) a plus.
• Understanding of CIM (Common Information Model) and data normalization.
• Scripting/programming experience in Python, PowerShell, or Shell scripting for automation and integrations.
• Familiarity with cloud environments (AWS, Azure, GCP) and DevOps pipelines.
• Solid understanding of log formats (JSON, XML, CSV, syslog, Windows Event Logs).
  
  

Preferred Qualifications

• Splunk Certified Power User, Splunk Certified Admin, or Splunk Core Certified Consultant.
• Background in IT operations monitoring, security monitoring, or DevOps observability.
• Experience with APIs and REST-based integrations.
• Strong communication skills to interact with both technical and business stakeholders.