Experience writing complex regex for field mappings and identifying patterns.
Experience with Puppet, Ansible, or other automation frameworks.
PREFERRED SKILLS AND EXPERIENCE
Certifications such as Splunk Enterprise Certified Architect, Splunk Enterprise Security Admin and Splunk Core Consultant.
Familiarity with integrating enterprise applications and on-boarding new log sources.
Familiarity with aerospace, satellite communications, launch vehicle, or factory-floor logging environments.
Knowledge in the Common Information Model (CIM) with a strong understanding between the CIM and knowledge objects.
Experience maintaining on-premises deployments of Splunk Core and Splunk Enterprise Security by supporting hundreds of users.
Experience in identifying visibility gaps for SOC detections and onboarding custom data sources into Splunk.
Experience with System Administration, DevOps, or Site Reliability Engineering.
Experience developing or extending Splunk with Python (custom commands, modular inputs, alert actions, or apps) beyond basic SPL.
Knowledge of Splunk SOAR (or equivalent security orchestration) and integrating Splunk with EDR, threat intel, or other security tools.
Experience applying Splunk Machine Learning Toolkit (MLTK) or similar for anomaly detection in operational or security data.
Hands-on experience with Git, CI/CD, or infrastructure-as-code practices specifically for Splunk configurations and knowledge objects.
Advanced Linux systems knowledge for large-scale Splunk clusters.
Experience supporting mission-critical, 24/7 operational environments with strict uptime and rapid incident response requirements.
ADDITIONAL REQUIREMENTS
Must be willing to work extended hours and weekends as needed.
This role requires you to be onsite. Hybrid or remote work will not be considered.
ITAR REQUIREMENTS
To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.
SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.
Applicants wishing to view a copy of SpaceX’s Affirmative Action Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should reach out to EEOCompliance@spacex.com.
