Junior Splunk Analyst

ApplyLogic Consulting Group•Columbia, WA

9d•Hybrid

About The Position

ApplyLogic is seeking a talented Junior Splunk Analyst to join their team in Columbia, SC or Washington, DC. This position will support a complex government client and requires experience in defining security, utilization, and performance requirements for local and wide area networks. The role involves implementing solutions that align with the Government’s security / monitoring systems and requirements. The Junior Splunk Analyst must be proficient in the SPLUNK platform and familiar with Ansible, Python, and PowerShell scripting, Internet Proxy Logs, RSA, Windows Active Directory, Windows Servers, Red Hat Enterprise Linux Servers, and capacity planning in Windows/ Linux environments. This is a hybrid position, requiring at least one day per week onsite.

Requirements

2 years of experience in SPLUNK administrator/engineering in a large complex enterprise environment.
Proficiency in the SPLUNK platform.
Familiarity with Ansible, Python, and PowerShell scripting.
Familiarity with Internet Proxy Logs, RSA, Windows Active Directory, Windows Servers, Red Hat Enterprise Linux Servers.
Experience with capacity planning in Windows/ Linux environments.
Must be a US citizen with the ability to obtain a Top-Secret security clearance.

Nice To Haves

SPLUNK Certifications

Responsibilities

Perform daily administrative tasks to manage Splunk datasets and storage utilization, including monitoring automated backup tasks, manually backing up data if necessary, and monitoring storage utilization on Splunk servers and network attached storage.
Maintain Splunk Knowledgebase by updating existing and creating new KB articles.
Create and update Splunk resources including saved searches, visualizations, alerts, dashboards, and other ad hoc deliverables.
Interface with the user community to provide first-level support for troubleshooting issues or assisting with Splunk requirements.
Coordinate with, accept tasking from, accept guidance from, and collaborate on priorities with the Senior Splunk engineer / Task lead.
Participate in periodic stand-up task meetings.
Create Splunk reports and dashboards based on enterprise customer requirements or internal team needs.
Assist in creating, updating, and documenting Ansible playbooks (scripts) used to automate tasks and workflows within the Splunk environments.
Manage Splunk lookups by verifying automated job updates to lookup tables and making ad hoc changes as necessary.
Monitor, administer, and maintain accessibility to Splunk components including search heads, indexers, deployers, cluster masters, forwarders, and syslog servers for continuous production environment uptime.
Coordinate with various components within the organization to troubleshoot issues.
Manage and secure RHEL and Windows servers for the Splunk platform, including patches and access controls.
Assist the team with reviewing, assessing, and implementing new data sources (e.g., syslog, scripted input, db inputs).
Work with IT Managers to validate data and provide training on new dashboard enhancements.
Assist with maintaining existing PowerShell / Python / C# scripts and creating new scripts as needed.
Assist with integrating various data sets into Splunk and creating new dashboards to ensure the confidentiality, integrity, security, and availability of the USAO WAN.
Provide a weekly Progress/Exceptions Report including a list of tasks assigned, completed, and pending.