Splunk SME

Looking for a number of Splunk SME's for a 6 month initial contract.

This role will be remote and will be Inside IR35

Key Requirements:

Splunk SME - Role 1

The role will require a suitably qualified and motivated person who can help:

Develop and support a Splunk cluster service and associated cloud infrastructure, to provide resilience and capability to an existing small team Support and Troubleshoot issues across Splunk infrastructure

Performance troubleshooting across all Splunk components of Search and Indexing Develop alerting and monitoring of Service Support wider team in dashboard development, including SPL and UI queries Assist in design & development of end-end workflow code promotion across dev and production

Support and provide guidance for on-boarding data sources to ensure the data is being used and interpreted correctly Support and guide others in a small cross-functional team to help them deliver and strengthen their Splunk skills.

Monitor and maintain Splunk performance, availability, and capacity Track work effectively via Agile methods Creation and maintenance of documentation related to Operational Process and Splunk technical guidance for the development team

Maintain regulatory awareness and compliance Act as a resource for colleagues with less experience Qualifications & skills

Minimum 4+ years of experience with SPLUNK Admin and Operational experience of use within IT Operations, and ideally cybersecurity Experience of Operational deployment and management of Search Head Cluster and Index Cluster

Experience with data on-boarding including HEC, syslog, parsing and transformation

Preferable experience working with cloud environments

Fully conversant with knowledge objects, data models and data

Thorough knowledge of Search Head & Index components

Experience of designing and building Splunk applications in a clustered environment

Excellent customer engagement skills including requirements gathering

Ability to solve problems both independently and collaboratively

Good documentation skills Desirable: DevOps tooling experience such as Ansible

Splunk SME Role 2

The role will require a suitably qualified and motivated person who can help:

Develop dashboards and reports using a wide range of data sources, ensuring data quality and good user interface and experience.

Develop performant SPL searches to combine information from multiple data sources to generate performance metrics and operational insights

Work with data owners and stakeholders to source and understand a wide range of data, to ensure the data is being used and interpreted correctly to drive insight into cybersecurity issues.

Provide thought leadership on what performance metrics and insights can be derived from various data sets

Support and guide others in a small cross-functional team to help them deliver and strengthen their Splunk skills.

Monitor and maintain Splunk performance, availability, and capacity

Develop reliable, efficient queries that will feed dashboards

Track work effectively via Agile methods

Create and maintain documentation related to dashboards, searches and data

Maintain regulatory awareness and compliance

Act as a resource for colleagues with less experience

Qualifications & skills Minimum 4+ years of experience with SPLUNK with experience of use within IT Operations, and ideally cybersecurity

Be a Splunk language (SPL) expert

Extensive experience building Splunk dashboards and reports

Fully conversant with knowledge objects, data models and data

Experience of designing and building Splunk applications in a multi-site clustered environment

Excellent customer engagement skills including requirements gathering

Ability to solve problems both independently and collaboratively

Good documentation skills

Desirable: Splunk Data on boarding experience

Experience with scripting languages to automate tasks and manipulate data Some knowledge of Javascript, Python and React JS preferred

Please submit your profile for consideration, all candidates must be eligible to work in the UK.