Splunk Engineer-W2

System Soft Technologies; Montgomery (AL); On-site; USD 90,000 - 120,000; Full time

Job summary

System Soft Technologies in Montgomery, AL seeks a seasoned Splunk engineer to design, implement, and optimize Splunk Enterprise or Splunk Cloud environments. You will onboard data, build dashboards and alerts, and tune performance to support security operations.

Ideal candidates have a BS in a related field and 5+ years of hands-on Splunk experience, including architecture, SPL, data models, and RBAC, with exposure to SOC environments and critical infrastructure settings.

Qualifications

• Bachelor's degree in a related field is required.
• 5+ years implementing, managing, and configuring Splunk Enterprise or Splunk Cloud.
• Experience with Splunk architecture: indexers, search heads, forwarders, deployment server.
• Developing Splunk dashboards, reports, alerts, tuning alerts, and saved searches.
• Onboarding and normalizing logs from infrastructure, apps, cloud platforms, and security tools.
• Building pipelines to parse, normalize, enrich, and route data to Splunk.
• Proficiency with SPL, data models, and RBAC.
• Knowledge of SIEM concepts, security monitoring, and threat detection use cases.
• Networking basics and log analysis; TLS, TCP/UDP, syslog, ports, troubleshooting.
• Certifications: Splunk Core Certified Power User, Admin, or ES certifications.

Skills

Splunk Enterprise / Splunk Cloud

SPL

SIEM concepts

Networking fundamentals

Scripting (Python, PowerShell, Bash)

SOC operations support

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or other related field

Tools

Splunk Architecture

Job description

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or other related field
• 5 years of experience implementing, managing, and configuring Splunk Enterprise or Splunk Cloud
• Experience in Splunk architecture, including indexers, search heads, forwarders, and deployment server.
• Experience developing Splunk dashboards, reports, alerts, tuning alerts, and saved searches.
• Experience onboarding and normalizing log sources from infrastructure, applications, cloud platforms, and security tools.
• Experience building pipelines to parse, normalize, enrich, and route data to Splunk.
• Proficiency with Splunk Search Processing Language (SPL), data models, and role-based access controls.
• Knowledge of Security Information and Event Management (SIEM) concepts, security monitoring, and threat detection use cases.
• Networking fundamentals, including Transmission Control Protocol/User Datagram Protocol (TCP/UDP), Transport Layer Security (TLS), syslog transport, firewall ports, and common transport issues, as well as system log analysis.
• Must hold one or more of the following certifications: Splunk Core Certified Power User, Splunk Enterprise Certified Admin, or a Splunk Enterprise Security certification.

Preferred Skills

• Advanced Splunk certifications, such as Splunk Certified Architect or Splunk Enterprise Security Certified Admin.
• Experience with Splunk Enterprise Security or Security Orchestration, Automation, and Response (SOAR) platforms.
• Scripting experience (Python, PowerShell, or Bash) for automation and data onboarding.

Experience supporting SOC operations in government, higher education, or critical infrastructure environments