Senior Splunk Engineer
Datacom, Australia
Job Description
Our purpose
Here at Datacom we connect people and technology in order to solve challenges, create opportunities and discover new possibilities for the communities we live in.
Our team
Based in Security Operations our Senior Splunk Administrators are hands on and work beside various operational teams, project managers, developers and BA’s. Our skilled team have the confidence to work autonomously while also developing and maintaining strong working relationships with the wider teams and managing and engaging their stakeholders.
About the Role
The Senior Splunk Administrator will solely focus on ensuring Splunk is operating securely, efficiently and collecting all required logs with correct retention thresholds.
This is a hands on role, being involved in various operational tasks and will need to be familiar with Linux and Microsoft operating systems, onboarding log sources, building dashboards and managing enterprise level Splunk environments.
What you’ll do
- Maintaining Splunk patch and release levels.
- Log ingestion for new applications when introduced into the environment.
- Mentor / develop Junior Splunk Administrators.
- Manage Splunk performance and scale the Splunk environment as required. On-boarding log sources.
- Creating/Testing/Deploying Splunk upgrades, configurations changes, etc. in multiple environments.
- Monitoring the Splunk infrastructure (Identify bad searches, dashboards, overall health of Splunk).
- Ensuring Splunk best practices are applied to Splunk infrastructure.
What you’ll bring
- Splunk certified Admin or Architect
- Experience with Redhat Linux.
- Experience with Splunk or other SIEM platforms.
- Understanding of common query languages leveraged by SIEM platforms.
- Logging technologies including syslog, Windows Event collectors and agent-based data acquisition.
- Data normalisation and the Splunk CIM
- Creating and developing reporting capabilities
- Ansible experience.
- Syslog-ng and/or rsyslog
- Experience managing a large distributed SIEM environment
About us
We have over 6,200 people across our global offices, and generate an annual revenue of over $1.2 billion, this makes us one of Australasia’s largest professional IT services companies. We have extensive expertise in operating data centres, providing IT services, software engineering and application management, as well as payroll and customer service design and operations. With this comes a long list of significant clients Datacom is committed to hiring, developing and promoting the best talent from a diverse range of backgrounds. We are local at heart, yet world-class in capability.