Splunk Developer/ Splunk Consultant

Cosmonaut Technologies; Pune District; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Cosmonaut Technologies is seeking an experienced Splunk Consultant in Pune with 6–10 years of hands-on Splunk administration, development, monitoring, and security analytics. The role focuses on designing, implementing, maintaining, and optimizing Splunk solutions to support enterprise monitoring, observability, security, and operations.

The candidate will design and administer Splunk Enterprise environments, develop dashboards and SPL queries, and collaborate with cross-functional teams to

Qualifications

• 6–10 years of hands-on Splunk experience and IT exposure.
• Experience with designing, implementing, and optimizing Splunk solutions for monitoring and security.
• Strong knowledge of Splunk Enterprise architecture and administration.
• Proficiency in creating dashboards, alerts, reports, and SPL queries.
• Experience with Linux/Unix environments and scripting languages (Python, Shell, PowerShell).

Responsibilities

• Design, deploy, configure, and administer Splunk Enterprise environments.
• Develop and optimize dashboards, reports, alerts, and visualizations.
• Create SPL queries for data analysis and troubleshooting.
• Maintain Splunk data models, indexes, and knowledge objects.
• Ingest data from logs, systems, cloud platforms, and network devices.
• Collaborate with DevOps, security, and IT teams on integration and automation.

Skills

Splunk

SPL

Linux/Unix

Python

REST APIs

Dashboarding

SIEM concepts

Problem solving

Communication

Tools

Splunk Enterprise

Splunk Enterprise Security

Splunk SOAR

AWS/Azure/GCP

Jenkins

Terraform

Kubernetes/Docker

Job description

Role & responsibilities

Splunk Consultant 6–10 Years Experience

Job Title: Splunk Consultant
Experience: 6–10 Years
Location: Pune
Employment Type: Full-time

Job Summary

We are looking for an experienced Splunk Consultant with 6–10 years of hands‑on experience in Splunk administration, development, monitoring, and security analytics. The candidate will be responsible for designing, implementing, maintaining, and optimizing Splunk solutions to support enterprise monitoring, observability, security, and operational requirements.

Key Responsibilities

• Design, deploy, configure, and administer Splunk Enterprise environments.
• Develop and optimize Splunk dashboards, reports, alerts, and visualizations.
• Create complex SPL (Search Processing Language) queries for data analysis and troubleshooting.
• Develop and maintain Splunk data models, indexes, sourcetypes, field extractions, and knowledge objects.
• Configure data ingestion from various sources such as application logs, servers, databases, cloud platforms, and network devices.
• Work with Universal Forwarders, Heavy Forwarders, Indexers, and Search Heads.
• Monitor Splunk infrastructure and troubleshoot performance, indexing, search, and data ingestion issues.
• Implement Splunk solutions for security monitoring, SIEM, incident investigation, and compliance.
• Integrate Splunk with enterprise tools and third-party applications using APIs, add-ons, and connectors.
• Perform capacity planning, performance tuning, and environment optimization.
• Manage Splunk upgrades, patches, configuration changes, and troubleshooting.
• Implement role‑based access control, authentication, and security best practices.
• Collaborate with application, infrastructure, cloud, DevOps, and security teams.
• Automate repetitive operational tasks using scripting and APIs where required.
• Prepare technical documentation, architecture diagrams, and operational procedures.

Required Skills

• 6–10 years of overall IT experience with strong hands‑on experience in Splunk.
• Strong knowledge of Splunk Enterprise architecture and administration.
• Excellent knowledge of SPL and search optimization.
• Experience with Splunk Enterprise Security (ES) and SIEM concepts.
• Experience in creating dashboards, alerts, reports, and correlation searches.
• Strong understanding of log management, monitoring, event correlation, and troubleshooting.
• Experience with Linux/Unix environments.
• Knowledge of REST APIs and scripting such as Python, Shell, or PowerShell.
• Experience integrating Splunk with cloud and enterprise applications.
• Good understanding of networking, security, servers, and application infrastructure.
• Strong analytical, troubleshooting, and communication skills.

Good to Have

• Splunk Enterprise Certified Admin / Certified Power User / Certified Architect certification.
• Experience with Splunk SOAR.
• Experience with AWS, Azure, or GCP.
• Knowledge of ITSI, Observability, or Splunk Infrastructure Monitoring.
• Experience with DevOps tools such as Jenkins, Git, Ansible, or Terraform.
• Knowledge of Kubernetes/Docker and cloud-native monitoring.