Splunk Engineer

This is a remote position. Location: Remote / Hybrid (as required by project) Australia based Contract Duration: 2-3 months (extendable and part/full time) Rate: Competitive, based on experience Role Summary: The Splunk Engineer will focus on the implementation and configuration of Splunk environments, particularly around data ingest and data management. The role will be responsible for onboarding data sources, running POVs, and supporting troubleshooting efforts to ensure effective logging and security monitoring. You must be based in Australia and pass police clearance. Key Responsibilities: • Implement data parsing, field extractions, and log filtering to enhance ingestion efficiency. • Work with stakeholders to re-onboard existing data sources and validate log integrity. • Ensure existing logs are properly mapped to Splunk’s Common Information Model (CIM). • Troubleshoot ingestion, performance, and connectivity issues within Splunk. • Assist with the implementation of data normalisation and log enrichment. • Configure and maintain Splunk forwarders, indexers, and search heads. • Support Splunk upgrades, patches, and security configurations. • Assist in integrating Splunk with third-party security tools such as SIEMs and SOAR platforms. Requirements Required Skills & Experience: • 3+ years of hands-on experience with Splunk configuration and administration. • Strong understanding of Splunk’s query language (SPL & SPL2) and dashboarding capabilities. • Experience in configuring Splunk forwarders, indexers, and search heads. • Familiarity with data onboarding, parsing, and normalisation. • Knowledge of security event logging and SIEM operations. • Experience with log pipeline tools (e.g., Cribl, Splunk DMX) is a plus. • Ability to troubleshoot log ingestion and performance issues. • Basic scripting skills (Python, Bash, PowerShell) for automation. • You must be based in Australia and pass police clearance.​ Benefits • Competitive Contract Rates: Get paid well for your expertise and contributions. • Remote & Hybrid Flexibility: Work from anywhere or engage on-site as needed. • Challenging & Impactful Work: Be a part of high-impact projects optimising security and logging strategies. • Short-Term with Potential Extensions: Ideal for professionals looking for flexible, extendable contracts. • Hands-on Exposure to Cutting-Edge Tech: Work with tools like Splunk Cloud, Cribl, Splunk DMX, and AWS/Azure environments. • Collaboration with Experts: Join a team of experienced professionals in security operations and data analytics. • Opportunities for Skill Enhancement: Learn from industry-leading experts and enhance your Splunk expertise. • Future Opportunities: Successful contributions could lead to longer-term engagements and additional contracts. • Innovative Work Environment: Work in a forward-thinking team that encourages creativity and problem-solving. • Professional Growth: Engage in projects that enhance your resume and keep you at the forefront of industry developments. • Work-Life Balance: Flexible working hours that allow you to maintain a balanced professional and personal life. • Supportive Company Culture: Join an organisation that values its people, fosters a positive work environment, and supports career progression. • Exposure to Enterprise-Level Deployments: Gain hands-on experience in large-scale, enterprise security environments, working alongside industry leaders. • Network & Build Industry Connections: Work with experts and expand your professional network in the cybersecurity and observability fields. Originally posted on Himalayas