A large automotive information technology organization is looking for a technical engineer that specializes in Splunk. This person will be a part of the Security Operations team who will be responsible for supporting the entire end-to-end Splunk on-prem or Splunk Cloud instance, including life cycle, requirements analysis, sizing, design, implementation, integration, testing, and documentation. The engineer will oversee daily operations anything related to Splunk and must be able to stand it up from scratch. This candidate must have a deep understanding of SIEM technologies, such as Cribl to consolidate and reduce budget. This position is hybrid, and the candidate must come on site in Fountain Valley at least 3 days a week.
**The employment would be a long-term contract, with possibility to be converted to Full Time Employee **
5+ years of experience as a Splunk Engineer/Architect preferably with Splunk Cloud
5+ years of experience with Cribl
5+ years of experience with onboarding data and configuration of indexes
5+ years of experience with writing advanced queries
5+ years of experience developing advanced dashboards for multiple use cases/business units
5+ years of experience writing and modifying Splunk apps for visualization and field extractions
Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.