Splunk SME Consultant

Job not on LinkedIn

Yesterday

Apply Now

Receive Emails with Similar Jobs

Precision Solutions

WebsiteLinkedInAll Job Openings

B2B • Enterprise • SaaS

Precision Solutions is an exceptional IT services partner that specializes in delivering enterprise managed services, DevOps solutions, and staffing support. With decades of experience, the company helps organizations navigate the complexities of technology by providing tailored solutions that enhance operational efficiency and facilitate talent acquisition. Precision Solutions employs Agile Development methodologies and is dedicated to improving collaboration between development and operations teams, ensuring effective software delivery.

11 - 50 employees

Founded 2012

🤝 B2B

🏢 Enterprise

☁️ SaaS

📋 Description

• Provide ongoing professional services for a long-standing federal customer • Support the customer with 20 hours of Splunk SME per year • Upgrade the customer’s Splunk Enterprise Security SIEM (7.x to 8.x) over 2 days • Support the SOC team with configuration tuning and optimization for 2 days • Conduct over-the-shoulder guidance for the SOC team during and after the upgrade • Provide configuration tuning, correlation search optimization, content review, and performance improvements • Deliver documentation and recommendations for ongoing health, performance, and operational maturity • Serve as an on-call SME throughout the year for up to 20 hours annually • Maintain strong communication with customer stakeholders • Provide flexible scheduling coordination with the customer

🎯 Requirements

• Proven experience as a Splunk SME supporting on-prem Splunk Enterprise, Enterprise Security, SOAR, and UBA • Hands-on experience performing Splunk Enterprise Security upgrades in production environments • Strong background in tuning, correlation development, dashboards, datamodel optimization, and content validation • Ability to provide expert-level guidance in an over-the-shoulder consulting format • Excellent verbal communication skills and the ability to guide SOC personnel through technical decision making • Experience supporting federal customers or regulated environments preferred • Willingness to support up to 20 hours of ad-hoc consulting work per year depending on customer need • Education/Certification Requirements: Splunk Enterprise Certified Admin or Splunk Enterprise Certified Architect is required • Additional Splunk ES, SOAR, or UBA certifications preferred • Bachelor’s degree or 6+ years of relevant experience in lieu of a degree

🏖️ Benefits

• No benefits specified