Splunk Cloud Engineer - Associate
Deutsche Bank is seeking a Splunk Cloud Engineer to support Security Operations, IT operations, and Compliance use cases. The role involves ingesting, normalizing, and validating data into Splunk while collaborating with various teams to engineer solutions.
Responsibilities
- Work with stakeholders to gather requirements for new sources and translate them into onboarding plans
- Configure and manage Splunk data inputs (Syslog, Universal forwarders, Application Programming Interface, Hybrid Electronic Cluster, cloud connectors etc.)
- Develop and maintain technical add-ons for field extractions, data parsing and normalization
- Ensure logs are onboarded following best practices for Common Information Model compliance and security frameworks (MITRE ATT&CK Framework, National Institute of Standards and Technology etc.)
- Troubleshoot ingestion issues across forwarders, indexers and parsing capabilities
- Automate onboarding workflows with scripts, dashboards, automation tools (Python, Ansible, Terraform etc.)
Skills
- Bachelors Degree or equivalent experience required
- Experienced in Splunk developing, onboarding and SIEM engineering along with Splunk universal forwarders, heavy forwarders and indexers
- Expertise in Splunk SPL for data validation and dashboards
- Proficiency in data parsing and field extractions using props.conf, transforms.conf and Regex
- Knowledge of operating system logs (windows, Linux), Network/Security devices (firewalls, Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS), proxies) and cloud platforms (Google Cloud Program, Azure, Amazon Web Services)
- Scripting/programming knowledge (Python, Bash, Power shell)
- Strong problem-solving and communication skills
- Experience on migration to Splunk cloud
Benefits
- A diverse and inclusive environment that embraces change, innovation, and collaboration
- A hybrid working model, allowing for in-office / work from home flexibility, generous vacation, personal and volunteer days
- Employee Resource Groups support an inclusive workplace for everyone and promote community engagement
- Competitive compensation packages including health and wellbeing benefits, retirement savings plans, parental leave, and family building benefits
- Educational resources, matching gifts, and volunteer programs
Company Overview
Company H1B Sponsorship