- Bachelor s or Master s degree in Computer Science, Information Security, or related field.
- 6+ years of experience with Splunk, including Splunk Enterprise and Splunk Cloud.
- Strong experience with Splunk architecture, deployment, and scaling in large environments.
- Hands-on experience with onboarding complex data sources and using SPL (Search Processing Language).
- Familiarity with security use cases, threat detection, and integration with security tools (e.g., Phantom, SOAR).
- Experience with Linux/Unix environments, scripting (Python, Bash), and automation tools.
- Knowledge of Splunk apps and add-ons (e.g., ES, ITSI, DB Connect).
- Splunk certifications (e.g., Splunk Architect, Splunk Certified Admin, Power User) are highly preferred.