Splunk Engineer (Security)

SPLUNK ENGINEER (SECURITY)

SpaceX is hiring a Splunk Engineer to help protect and drive the SpaceX mission. Our engineers are responsible for deploying, administrating and supporting a distributed Splunk environment at an enterprise scale. As a highly visible and dynamic organization, we must value and guard against damage to our internal information, our physical hardware, and our reputation and brand. It is paramount that we defend against loss of control or confidence in our systems, to guarantee the highest probability of success.

RESPONSIBILITIES:

• Deploy, Admin and Support distributed Splunk environment at an enterprise scale
• Standardize Splunk agent and enterprise deployment, configuration and management with automation
• Help monitor and maintain the logging platforms performance, availability, and capacity.
• Write Complex SPLs to help Infosec and other IT organizations with their dashboards and alerts.
• Troubleshoot Splunk Instances and Splunk Universal Forwarder problems
• Data onboarding, governance, enrichment and fields extraction for various use cases

BASIC QUALIFICATIONS:

• 2+ years administering or implementing Splunk in a professional setting
• Experience writing complex regex for field mappings and identifying patterns
• Experience with Puppet, Ansible, or other automation frameworks

PREFERRED SKILLS AND EXPERIENCE:

• Certifications such as: Splunk Enterprise Certified Architect, Splunk Enterprise Security Admin and Splunk Core Consultant are big plus!
• Familiarity with integrating enterprise applications and on-boarding new log sources
• Knowledge in the Common Information Model (CIM) with a strong understanding between the CIM and knowledge objects
• Experience maintaining on-premises deployments of Splunk Core and Splunk Enterprise Security by supporting hundreds of users
• Experience in identifying visibility gaps for SOC detections and onboarding custom data sources into Splunk
• System Administration, DevOps, or Site Reliability Engineering experience

ADDITIONAL REQUIREMENTS:

• Must be willing to work extended hours and weekends as needed.

COMPENSATION AND BENEFITS:

Pay range:
Splunk Admin/Level I: $130,000.00 - $150,000.00/per year
Splunk Admin/Level II: $145,000.00 - $175,000.00/per year

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience.

Base salary is just one part of your total rewards package at SpaceX. You may also be eligible for long-term incentives, in the form of company stock, stock options, or long-term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan. You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short and long-term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation and will be eligible for 10 or more paid holidays per year. Exempt employees are eligible for 5 days of sick leave per year.