JOB DESCRIPTION:
Splunk Cyber Security Engineer will be responsible for engineering data ingestion for the client Splunk instance is configured and maintained properly.
Splunk Backend Management
Ø Management of Indexes
Ø Onboarding new Indexes as needed
Ø Onboarding Log Sources
Ø Maintaining Current Log Sources
Ø Installing/Update Apps and Addons in Splunk
Ø Researching Splunk Add-ons
Ø Splunk Change Management and Maintenance
Network Knowledge (Understanding of how data flows throughout the network)
Linux Syslog Maintenance
Ø Log Rotation
Ø Maintenance of Syslog Services
Red Hat Linux Administration
Ø Linux Updates
Ø Security Patching
Ø Splunk Deployments
On Call for Splunk related outages