Senior Splunk Consultant @ Link Group

Link Group; Polska; On-site; PLN 80,000 - 100,000; Full time

Job summary

A leading tech consulting firm is seeking a Senior Splunk Consultant in Poland to design, develop, and maintain Splunk environments, focusing on Cyber Defense. Responsibilities include managing multi-node Splunk clusters and developing correlation searches. The ideal candidate has significant experience with Splunk design and automation using Ansible. This role offers competitive compensation and opportunities for professional growth.

Qualifications

• Strong experience with Splunk design and deployment.
• Experience in developing and optimizing correlation searches.
• Ability to automate tasks using Ansible.

Responsibilities

• Design and maintain multi-node and clustered Splunk environments.
• Develop and optimize correlation searches for Enterprise Security.
• Onboard new data sources and integrate external systems.
• Manage Universal Forwarder deployments and configuration distribution.

Skills

Strong experience with Search Head Clusters

Experience with Ansible

Ability to build security-focused use cases

Tools

Splunk

Ansible

Job description

Senior Splunk Consultant @ Link Group
Polska

Job Overview

We are seeking a Senior Splunk Consultant responsible for designing, developing, and maintaining Splunk environments within enterprise infrastructures, with a strong focus on Cyber Defense.

Responsibilities

• Design and maintain multi-node and clustered Splunk environments.
• Develop and optimize correlation searches for Enterprise Security use cases.
• Onboard new data sources and integrate external systems.
• Develop custom Splunk apps and add-ons.
• Manage Universal Forwarder deployments and configuration distribution.
• Perform platform administration: installation, licensing, field extractions, event parsing, and app management.
• Automate administrative tasks using Ansible.

Requirements

• Strong experience with Search Head Clusters, Indexer Clusters, and enterprise Splunk design.
• Ability to build security-focused use cases and data workflows.
• Experience with Ansible or similar automation tools.

Preferred Certifications

• Splunk Enterprise Certified Architect
• Splunk Enterprise Security Certified Admin