Splunk Infrastructure Engineer

We’re looking for a Splunk Infrastructure Engineer to join our cyber infrastructure team. We want people who live and breathe data and enjoy diving into complex systems, with a clear understanding that our goal is to deliver accurate data for the organization’s cybersecurity and defense capabilities.

What will we work on together?

• Operation, administration, and ongoing monitoring of Splunk servers.

• End-to-end ownership of Data Onboarding, normalization, and CIM mapping — ensuring cyber teams receive the highest-quality information in real time.

• High-level troubleshooting — identifying and investigating issues, including deep analysis of internal logs (index _internal) and monitoring REST API mechanisms.

• Pipeline optimization, performing upgrades and server maintenance while working closely with IT and cyber teams.

What should you bring?

• 3+ years of experience deploying, operating, and administering Splunk systems.

• Hands-on, in-depth experience with log ingestion, parsing, and field extraction.

• Deep familiarity with Splunk architecture and advanced troubleshooting capabilities.

• Full proficiency with Regex and solid understanding of data normalization processes.

• Broad knowledge of Linux and Windows operating systems and experience scripting (Bash or PowerShell).

If you’re looking for a significant technical challenge behind the scenes of the cyber world and want to directly impact the organization’s defense capabilities — please send your CV.