Description
Splunk Developer
Our objectives are to:
- Enable the analysts of the future
- Inform decisions with data
- Protect against advanced and emerging threats
- Develop next-generation capabilities and intellectual property
- Make security operate efficiently and effectively at scale
Core responsibilities:
The role will require a suitably qualified and motivated person who can help:
- Develop dashboards and reports using a wide range of data sources, ensuring data quality and good user interface and experience.
- Develop performant SPL searches to combine information from multiple data sources to generate performance metrics and operational insights
- Work with data owners and stakeholders to source and understand a wide range of data, to ensure the data is being used and interpreted correctly to drive insight into cybersecurity issues.
- Provide thought leadership on what performance metrics and insights can be derived from various data sets
- Support and guide others in a small cross-functional team to help them deliver and strengthen their Splunk skills.
- Monitor and maintain Splunk performance, availability, and capacity
- Develop reliable, efficient queries that will feed dashboards
- Familiar with searching across kvstore's, data models
- Experience with search optimization in dashboard development
- Track work effectively via Agile methods
- Create and maintain documentation related to dashboards, searches, and data
- Maintain regulatory awareness and compliance
- Act as a resource for colleagues with less experience
Qualifications & skills
- Minimum 4+ years of experience with SPLUNK with experience of SPL and developing dashboard
- Be a Splunk language (SPL) expert
- Extensive experience building Splunk dashboards and reports
- Fully conversant with knowledge objects, data models and data
- Experience of designing and building Splunk applications in a multi-site clustered environment
- Excellent customer engagement skills including requirements gathering
- Ability to solve problems both independently and collaboratively
- Good documentation skills
- Desirable:
- Splunk Certified Developer
- Splunk Certified Consultant