Splunk Engineer

SpaceX • Cape Canaveral, FL

5d • Onsite

About The Position

SpaceX is hiring a Splunk Engineer to help protect and drive the SpaceX mission. The role is responsible for deploying, administering, and supporting a distributed Splunk environment at enterprise scale. The engineer will help defend SpaceX’s internal information, physical hardware, reputation, and brand by protecting the control and confidence of its systems.

Requirements

• At least 2 years of experience administering or implementing Splunk in a professional setting.
• Experience writing complex regular expressions for field mappings and pattern identification.
• Experience with Puppet, Ansible, or other automation frameworks.
• Must be willing to work extended hours and weekends as needed.
• Must meet the stated U.S. Government export-control eligibility requirements or be eligible to obtain the required authorizations.

Nice To Haves

• Certifications such as Splunk Enterprise Certified Architect, Splunk Enterprise Security Admin, or Splunk Core Consultant.
• Familiarity with integrating enterprise applications and onboarding new log sources.
• Familiarity with aerospace, satellite communications, launch vehicle, or factory-floor logging environments.
• Knowledge of the Common Information Model (CIM) and its relationship to knowledge objects.
• Experience maintaining on-premises Splunk Core and Splunk Enterprise Security deployments supporting hundreds of users.
• Experience identifying visibility gaps for SOC detections and onboarding custom data sources into Splunk.
• Experience with system administration, DevOps, or Site Reliability Engineering.
• Experience developing or extending Splunk with Python, including custom commands, modular inputs, alert actions, or apps beyond basic SPL.
• Knowledge of Splunk SOAR or equivalent security orchestration and experience integrating Splunk with EDR, threat intelligence, or other security tools.
• Experience applying Splunk Machine Learning Toolkit (MLTK) or similar tools for anomaly detection in operational or security data.
• Hands-on experience with Git, CI/CD, or infrastructure-as-code practices for Splunk configurations and knowledge objects.
• Advanced Linux systems knowledge for large-scale Splunk clusters.
• Experience supporting mission-critical, 24/7 operational environments with strict uptime and rapid incident-response requirements.

Responsibilities

• Deploy, administer, and support a distributed Splunk environment at enterprise scale.
• Standardize Splunk agent and enterprise deployment, configuration, and management using automation.
• Monitor and maintain the logging platform’s performance, availability, and capacity.
• Write complex SPLs to support dashboards and alerts for Information Security and other IT organizations.
• Troubleshoot Splunk instances and Splunk Universal Forwarder problems.
• Onboard, govern, and enrich data, and extract fields for various use cases.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed