FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive expertise in Splunk platform architecture, data onboarding, and security integrations, with a strong focus on optimizing Splunk Enterprise Security solutions. Proven ability to translate complex business and security needs into effective technical solutions while providing mentorship and technical documentation for customer self-sufficiency.
Highest-signal resume keywords
Splunk Enterprise SecurityData OnboardingSPL ProgrammingCloud Provider ExperienceDeployment Automation
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Splunk ExperienceDistributed Splunk EnvironmentsCorrelation SearchesRisk-Based AlertingSearch TuningLinux ProficiencyScripting in PythonTerraform AutomationAnsible AutomationCIM Normalization
Soft Skills
Analytical SkillsTroubleshooting SkillsCustomer-Facing Skills
Tools & Technologies
Splunk EnterpriseSplunk Cloud PlatformAWSAzureGCPTerraformAnsibleSplunk AI AssistantSplunk MCP Server
Certifications & Qualifications
Relevant Splunk Certifications
Industry Keywords
CybersecuritySIEM MigrationsSOAR PlaybooksObservability SolutionsMITRE ATT&CK
Tech Stack
Tools & technologiesAnsibleAWSAzureCloudCyber SecurityGoogle Cloud PlatformITSMLinuxPythonSplunkTerraform
About the role
Key responsibilities & impact- Serve as the main technical delivery authority for TeraSky’s Splunk practice
- Lead hands-on delivery for enterprise customers across platform architecture, data onboarding, Splunk Enterprise Security, security integrations, and platform optimization
- Support SOAR, observability, SIEM migrations, and security proofs of concept as project needs require
- Guide customers across on-premises, cloud, and hybrid environments
- Translate business and security needs into practical technical solutions
- Help define technical standards for the Splunk practice
- Contribute to presales discussions, solution scoping, and delivery estimates
- Design, implement, and optimize Splunk Enterprise and Splunk Cloud Platform environments, including architecture, sizing, retention, performance tuning, and troubleshooting
- Deliver Splunk Enterprise Security solutions, including data onboarding, CIM normalization, MITRE ATT&CK-aligned detections, risk-based alerting, dashboards, and reports
- Automate deployments and integrate security and ITSM platforms
- Provide technical documentation, workshops, mentoring, and customer knowledge transfer to enable customer self-sufficiency
Requirements
What you’ll need- 5+ years of hands-on Splunk experience in production, including 2+ years with Splunk Enterprise Security
- Proven experience designing and managing distributed Splunk environments, including search heads, indexers, forwarders, capacity planning, and retention configuration
- Hands-on experience implementing and configuring Splunk Enterprise Security, including correlation searches, MITRE ATT&CK-aligned detections, risk-based alerting, and asset and identity enrichment
- Strong SPL, CIM, and data onboarding skills, including props/transforms, field extractions, forwarders, HEC, and syslog
- Experience optimizing Splunk and ES performance, including search tuning, data model acceleration, search scheduling and concurrency, and detection tuning to reduce false positives
- Solid cybersecurity and networking knowledge, including Windows / Active Directory and Microsoft Entra ID security logs
- Hands-on experience with Linux and at least one major cloud provider: AWS, Azure, or GCP
- Strong analytical, troubleshooting, and customer-facing skills
- Scripting skills in Python, Bash, or PowerShell
- Deployment/configuration automation experience with Terraform or Ansible
- Familiarity with Splunk AI Assistant and Splunk MCP Server for search, investigation, and operational workflows is an advantage
- Relevant Splunk certifications, or experience with SIEM migrations, SOAR playbooks, Edge/Ingest Processor, observability solutions, or CI/CD is an advantage
Benefits
Comp & perks- Growth opportunities in a global technology solution integrator
- Work with leading experts, modern technologies, and complex, high-impact projects
- Exposure to leading technology partners including AWS, Microsoft, Google, and VMware
- Customer knowledge-transfer, workshops, and mentoring opportunities