Splunk Engineer

SpaceX • Bastrop, TX

5d • Onsite

About The Position

SpaceX is hiring a Splunk Engineer to help protect and support the SpaceX mission. The role is responsible for deploying, administering, and supporting an enterprise-scale distributed Splunk environment. The work helps safeguard SpaceX’s internal information, physical hardware, reputation, and systems by maintaining visibility and dependable security and operational logging.

Requirements

• At least 2 years of experience administering or implementing Splunk in a professional setting.
• Experience writing complex regular expressions for field mappings and pattern identification.
• Experience with Puppet, Ansible, or other automation frameworks.
• Must be willing to work extended hours and weekends as needed.
• Must work onsite; hybrid or remote work will not be considered.
• Must meet applicable U.S. Government export-control eligibility requirements: be a U.S. citizen or national, a U.S. lawful permanent resident, a refugee or asylee under the specified statutes, or eligible to obtain required U.S. Department of State authorizations.

Nice To Haves

• Certifications such as Splunk Enterprise Certified Architect, Splunk Enterprise Security Admin, or Splunk Core Consultant.
• Familiarity with integrating enterprise applications and onboarding new log sources.
• Familiarity with aerospace, satellite communications, launch vehicle, or factory-floor logging environments.
• Knowledge of the Common Information Model (CIM) and a strong understanding of the relationship between CIM and knowledge objects.
• Experience maintaining on-premises Splunk Core and Splunk Enterprise Security deployments supporting hundreds of users.
• Experience identifying SOC detection visibility gaps and onboarding custom data sources into Splunk.
• Experience with system administration, DevOps, or Site Reliability Engineering.
• Experience developing or extending Splunk with Python, including custom commands, modular inputs, alert actions, or apps, beyond basic SPL.
• Knowledge of Splunk SOAR or equivalent security orchestration, and experience integrating Splunk with EDR, threat intelligence, or other security tools.
• Experience applying Splunk Machine Learning Toolkit (MLTK) or similar tools for anomaly detection in operational or security data.
• Hands-on experience with Git, CI/CD, or infrastructure-as-code practices for Splunk configurations and knowledge objects.
• Advanced Linux systems knowledge for large-scale Splunk clusters.
• Experience supporting mission-critical, 24/7 operational environments with strict uptime and rapid incident response requirements.

Responsibilities

• Deploy, administer, and support a distributed Splunk environment at enterprise scale.
• Standardize Splunk agent and enterprise deployment, configuration, and management using automation.
• Help monitor and maintain the logging platform’s performance, availability, and capacity.
• Write complex SPL to support dashboards and alerts for information security and other IT organizations.
• Troubleshoot Splunk instances and Splunk Universal Forwarder problems.
• Onboard, govern, and enrich data, and extract fields for various use cases.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed