Splunk Engineer

SpaceX • Starbase, TX, TX

5d • Onsite

About The Position

SpaceX is hiring a Splunk Engineer to help protect and support the SpaceX mission. The role is responsible for deploying, administering, and supporting a distributed Splunk environment at enterprise scale. The position helps defend SpaceX’s internal information, physical hardware, systems, reputation, and brand by maintaining a reliable logging platform and supporting information security and other IT organizations.

Requirements

• At least 2 years of experience administering or implementing Splunk in a professional setting.
• Experience writing complex regular expressions for field mappings and pattern identification.
• Experience with Puppet, Ansible, or other automation frameworks.
• Willingness to work extended hours and weekends as needed.
• Must work onsite; hybrid or remote work will not be considered.
• Must meet U.S. Government export-control eligibility requirements: be a U.S. citizen or national, a U.S. lawful permanent resident, a refugee, an asylee, or eligible to obtain required authorizations from the U.S. Department of State.

Nice To Haves

• Certifications such as Splunk Enterprise Certified Architect, Splunk Enterprise Security Admin, or Splunk Core Consultant.
• Familiarity with integrating enterprise applications and onboarding new log sources.
• Familiarity with aerospace, satellite communications, launch vehicle, or factory-floor logging environments.
• Knowledge of the Common Information Model (CIM) and a strong understanding of the relationship between CIM and knowledge objects.
• Experience maintaining on-premises deployments of Splunk Core and Splunk Enterprise Security supporting hundreds of users.
• Experience identifying visibility gaps for SOC detections and onboarding custom data sources into Splunk.
• Experience with system administration, DevOps, or Site Reliability Engineering.
• Experience developing or extending Splunk with Python, including custom commands, modular inputs, alert actions, or apps, beyond basic SPL.
• Knowledge of Splunk SOAR or equivalent security orchestration, and experience integrating Splunk with EDR, threat intelligence, or other security tools.
• Experience applying Splunk Machine Learning Toolkit (MLTK) or similar tools for anomaly detection in operational or security data.
• Hands-on experience with Git, CI/CD, or infrastructure-as-code practices for Splunk configurations and knowledge objects.
• Advanced Linux systems knowledge for large-scale Splunk clusters.
• Experience supporting mission-critical, 24/7 operational environments with strict uptime and rapid incident-response requirements.

Responsibilities

• Deploy, administer, and support a distributed Splunk environment at enterprise scale.
• Standardize Splunk agent and enterprise deployment, configuration, and management through automation.
• Help monitor and maintain logging-platform performance, availability, and capacity.
• Write complex SPL queries to support dashboards and alerts for information security and other IT organizations.
• Troubleshoot Splunk instances and Splunk Universal Forwarder problems.
• Onboard, govern, and enrich data, and extract fields for various use cases.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed