| Need local to Virginia - SPLUNK Administrator at Culpeper, Virginia, USA |
| Email: [email protected] |
|
http://bit.ly/4ey8w48 https://jobs.nvoids.com/job_details.jsp?id=2195880&uid= From: Sandeep, Key Infotek [email protected] Reply to: [email protected] Position: - SPLUNK Administrator Location: - Culpeper,VA-22701 in person interview Role responsibilities: Data engineering Onboard data to Splunk via forwarder, scripted inputs, TCP/UDP, and modular inputs from a variety of sources. Develop and implement strategies to normalize current and future log data, making it consistent and usable for analysis. Assess existing Splunk data feeds and implement changes to improve overall SIEM health and align with best practices Diagnose and resolve issues related to log ingestion and normalization. Administration & Support Provide operations and maintenance support for a distributed Splunk environment consisting of heavy forwarders, indexers, and search head servers Build, implement, and administer Splunk in Linux environments Work with existing and custom Splunk applications and add-ons to fulfil customer needs Editing and maintaining Splunk configuration files and apps Maintain comprehensive documentation of log onboarding and normalization processes. Support security operational teams Required qualifications: Splunk 4+ Years Experience with Splunk Enterprise hands-on Engineering & Administration deployment, troubleshooting, onboarding data, and maintenance in a clustered environment Experience with Splunk data ingestion methods, including forwarders, HTTP Event Collector (HEC), and scripted inputs. Experience implementing CIM compliance and optimizing Splunk data models Proficiency in SPL In-depth knowledge of various log formats (e.g., syslog, JSON). IT & Security principles 3+ years of experience with Linux OS, services, daemons, and VMs Solid understanding of IT infrastructure, including networking, operating systems, and security principles. Solid understanding of security operations and common log source requirements for security appliances and endpoints Ability to follow Change & Configuration Management, utilizing automation tools, such as Git. Additional competencies Splunk Enterprise Certified Admin or other relevant credentials Industry Certifications such as GDAT or GMON Experience with other cyber security tools and technologies Proficiency in scripting languages such as Python, Bash Keywords: information technology Virginia Need local to Virginia - SPLUNK Administrator [email protected] http://bit.ly/4ey8w48 https://jobs.nvoids.com/job_details.jsp?id=2195880&uid= |
| [email protected] View All |
| 08:17 PM 21-Feb-25 |