Splunk Service Engineer (Integration & Ingestion) – Morrisville, NC
Location:Morrisville, NC
Full-time or Part-time:Full Time
Open Date:6/16/2018
Requisition Code:201806-1353
  
Job Description

 

 

Splunk Service Engineer (Integration & Ingestion) – Morrisville, NC

Provides consulting, training and hands-on-keyboard services for Splunk data integration, content development and user enablement for the CISO organization.

 

Tuning and configuration of Splunk App for Enterprise Security (ES)
Work with CISO Operations and Engineering to  gather requirements for building content and use cases in Splunk.
Assist in development of advanced security use cases in Splunk
Handle User Enablement to include assist and/or train CISO Splunk team on data lifecycle support, assist and/or train CISO team and analysts on Content Development, develop and implement automation and efficiencies with Splunk and CISO workflows, provide analyst training and workshops on using Splunk, and introduce new content, alerts and data sources to CISO Analysts. 
Develop Data Lifecycles
1.Data Discovery with Application Owners/End Users to determine data source structure and onboarding design. 
2.Data Parsing (Dev) at Index Time (Host, Source, Sourcetype, Line breaks, Timestamps)
3.Data Normalization (Dev) including CIM compliance. Preparing data to be ready for search, data models and content development
4.Data Validation (Dev) work with Application owner and end user to validate data normalization
5.Data Onboarding (Prod) work with Splunk Admins to onboard Data from Dev to Prod
Abilities Required:
• While performing the duties of this job the employee is regularly required to sit and use hands to finger, handle, or feel while typing at a computer keyboard.
• The employee is occasionally required to stand, walk, reach, or lift objects up to 10 pounds.
• The employee is frequently required to talk or hear. The vision requirements include: close vision.
EEO Statement
Catapult Consultants is an Equal Opportunity Employer. We believe that every employee has the right to work in a dignified work environment free from all forms of discrimination and harassment. It’s our policy to recruit, employ, retain, compensate, train, promote, discipline, terminate and otherwise treat all employees and job applicants based solely on qualifications, performance, and competence. This policy reflects our belief that providing equal opportunities for all employees is a both our legal and moral responsibility, and good management practice.

All employees and applicants are treated without regard to age, sex, color, religion, race, national origin, citizenship, veteran status, current or future military status, sexual orientation, gender identification, marital or familial status, disability or any other status protected by law.
Disclaimer
The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified. All personnel may be required to perform duties outside of their normal responsibilities from time to time, as needed.