Splunk Engineer

SpaceX•Washington, DC

5d•$135,000 - $195,000•Onsite

About The Position

SpaceX is hiring a Splunk Engineer to help protect and support its mission. The role is responsible for deploying, administering, and supporting a distributed Splunk environment at enterprise scale. The engineer helps safeguard SpaceX’s internal information, physical hardware, systems, reputation, and brand by maintaining a reliable logging and security platform.

Requirements

At least 2 years of experience administering or implementing Splunk in a professional setting.
Experience writing complex regular expressions for field mappings and identifying patterns.
Experience with Puppet, Ansible, or other automation frameworks.
Must be willing to work extended hours and weekends as needed.
Must work onsite; hybrid and remote work are not considered.
Must meet the stated U.S. export-control eligibility requirements or be eligible to obtain the required U.S. Department of State authorizations.

Nice To Haves

Certifications such as Splunk Enterprise Certified Architect, Splunk Enterprise Security Admin, or Splunk Core Consultant.
Familiarity with integrating enterprise applications and onboarding new log sources.
Familiarity with aerospace, satellite communications, launch vehicle, or factory-floor logging environments.
Knowledge of the Common Information Model (CIM), including its relationship to knowledge objects.
Experience maintaining on-premises Splunk Core and Splunk Enterprise Security deployments supporting hundreds of users.
Experience identifying visibility gaps for SOC detections and onboarding custom data sources into Splunk.
Experience with system administration, DevOps, or Site Reliability Engineering.
Experience developing or extending Splunk with Python, including custom commands, modular inputs, alert actions, or apps beyond basic SPL.
Knowledge of Splunk SOAR or equivalent security orchestration, and experience integrating Splunk with EDR, threat intelligence, or other security tools.
Experience applying Splunk Machine Learning Toolkit (MLTK) or similar tools for anomaly detection in operational or security data.
Hands-on experience with Git, CI/CD, or infrastructure-as-code practices for Splunk configurations and knowledge objects.
Advanced Linux systems knowledge for large-scale Splunk clusters.
Experience supporting mission-critical, 24/7 operational environments with strict uptime and rapid incident-response requirements.

Responsibilities

Deploy, administer, and support a distributed Splunk environment at enterprise scale.
Standardize Splunk agent and enterprise deployment, configuration, and management through automation.
Monitor and maintain the logging platform’s performance, availability, and capacity.
Write complex SPL queries to support dashboards and alerts for information security and other IT organizations.
Troubleshoot Splunk instances and Splunk Universal Forwarder problems.
Onboard, govern, and enrich data, and perform field extraction for various use cases.

Benefits

Potential eligibility for long-term incentives in the form of company stock or long-term cash awards.
Potential discretionary bonuses.
Ability to purchase additional stock at a discount through an Employee Stock Purchase Plan.
Comprehensive medical coverage.
Vision insurance.
Dental insurance.
401(k) retirement plan.
Short- and long-term disability insurance.
Life insurance.
Paid parental leave.
Various other discounts and perks.
Up to 3 weeks of accrued paid vacation.
10 or more paid holidays per year.
Paid sick leave pursuant to company policy.