Senior Splunk Developer

Home VacanciesSenior Splunk Developer

Lviv, Ukraine

We are seeking a Senior Splunk Developer to join our Data Science Division. As part of the design and implementation effort, the Splunk developer will participate in various aspects of the implementations, including using Splunk to develop a proof of concept where legacy information systems are migrated to Splunk Enterprise. The Senior Splunk Developer will have to model data from several legacy and/or modern applications before ingesting the data into Splunk. The Splunk Developer will work closely with government personnel and other professionals in a team environment.

The Candidate must be able to:

Design and develop an “end to end” electronic transaction visibility, including large scale processing, integration, and analysis of system logs and databases in Splunk.
Develop statistical behavior models, and provide support for the development of machine learning approaches.
Develop visualization dashboards and indicators that identify anomalous activities.
Assist with the development of project status briefings and dashboards for IRS executives
Interact directly with client project team members and operational staff.
Familiarity with the configuration file options that are not available through the GUI.
A sophisticated understanding of Splunk “Search” language
A deep understanding of Splunk Dashboards, Reports, Lookup Tables, and Summary Indexes.
Knowledge of how to customize Dashboards via the XML source.
Awareness of the Common Information Model and how to apply it directly and indirectly to data feeds.
Expert-level capabilities with regular expression.
Experience with Splunk Apps (both using and making).
Intermediate to Expert -level capability with the Python Scripting Language.
Awareness of how to handle null data and its impact on statistical analysis

Requirements:

Bachelor/Master in IT, Math or Computer Science
At least two years of experience in security applications and systems related audit and accountability
Splunk expertise with strong information security experience and have mastered the art of working with regular expressions to effectively extract key tokens of data into meaningful fields.
Experience with relational databases is a plus.
Experience with application servers being used for the extraction, transformation, and loading (ETL) of operational logs and individuals audit data deposited in a staging area for generating audit analysis reports.
Experience with AMDAS on MQ Series will be critical. Cyber security experience.
Familiarity with the configuration file options that are not available through the GUI.
A sophisticated understanding of Splunk “Search” language. A deep understanding of Splunk Dashboards, Reports, Lookup Tables, and Summary Indexes.
Knowledge of how to customize Dashboards via the XML source.
Awareness of the Common Information Model and how to apply it directly and indirectly to data feeds.
Expert-level capabilities with regular expression.
Experience with Splunk Apps (both using and making).
Intermediate to Expert -level capability with the Python Scripting Language.
Awareness of how to handle null data and its impact on statistical analysis.
Experience with reviewing, analyzing and coordinating requirements for ingesting auditable and actionable events into Splunk.
Proven ability to work on and with teams comprised of the primary client and other client stakeholders dispersed across geographical sites.
Excellent verbal and written communication skills.