At a glance
- Experience
- 2+ years experience
- Workplace
- Hybrid
- Location
- Redmond, WA
About the role
- SpaceX is hiring a Splunk Engineer to help protect and drive the SpaceX mission by deploying, administrating, and supporting a distributed Splunk environment at an enterprise scale.
Responsibilities
- Deploy, Admin and Support distributed Splunk environment at an enterprise scale.
- Standardize Splunk agent and enterprise deployment, configuration and management with automation.
- Help monitor and maintain the logging platform's performance, availability, and capacity.
- Write Complex SPLs to help Infosec and other IT organizations with their dashboards and alerts.
- Troubleshoot Splunk Instances and Splunk Universal Forwarder problems.
- Data onboarding, governance, enrichment and fields extraction for various use cases.
Requirements
- 2+ years of experience administering or implementing Splunk in a professional setting.
- Experience writing complex regex for field mappings and identifying patterns.
- Experience with Puppet, Ansible, or other automation frameworks.
- Must be willing to work extended hours and weekends as needed.
- Must be onsite; hybrid or remote work will not be considered.
- Must be a U.S. citizen or national, U.S. lawful permanent resident, Refugee, Asylee, or eligible to obtain required authorizations from the U.S. Department of State.
Preferred qualifications
- Certifications such as Splunk Enterprise Certified Architect, Splunk Enterprise Security Admin and Splunk Core Consultant.
- Familiarity with integrating enterprise applications and on-boarding new log sources.
- Familiarity with aerospace, satellite communications, launch vehicle, or factory-floor logging environments.
- Knowledge in the Common Information Model (CIM) with a strong understanding between the CIM and knowledge objects.
- Experience maintaining on-premises deployments of Splunk Core and Splunk Enterprise Security by supporting hundreds of users.
- Experience in identifying visibility gaps for SOC detections and onboarding custom data sources into Splunk.
- Experience with System Administration, DevOps, or Site Reliability Engineering.
- Experience developing or extending Splunk with Python (custom commands, modular inputs, alert actions, or apps) beyond basic SPL.
Benefits
- Long-term incentives in the form of company stock or long-term cash awards
- Potential discretionary bonuses
- Employee Stock Purchase Plan to purchase additional stock at a discount
- Comprehensive medical, vision, and dental coverage
- Access to a 401(k) retirement plan
- Short and long-term disability insurance
- Life insurance
- Paid parental leave
- 3 weeks of paid vacation
- 10 or more paid holidays per year
Workplace
- Role requires you to be onsite; hybrid or remote work will not be considered.
- Company shuttles are offered to employees for roundtrip travel from select Seattle locations to the SpaceX Redmond office Monday to Friday.
Skills
- Splunk
- Puppet
- Ansible
- Python
- Splunk Enterprise Security
- Splunk SOAR
- EDR
- Splunk Machine Learning Toolkit (MLTK)
- Git
- CI/CD
- Linux
