Splunk SME

Our client is seeking an experienced Splunk professional to support a critical transition initiative over the next 12 18 months. This individual will serve as the go-to subject matter expert for the organization’s on-premises Splunk environment while helping strengthen internal capabilities and providing guidance to an existing team member who is continuing to expand their Splunk expertise. This position plays a key role in maintaining and enhancing security monitoring, compliance reporting, and log management functions while supporting the evolution of the organization’s current security operations environment. The selected consultant will play a critical role in maintaining platform stability, supporting compliance objectives, and ensuring a smooth transition of knowledge and operational responsibilities across the organization., * Act as the primary Splunk technical expert for an enterprise security and monitoring environment.

• Provide day-to-day support and administration of Splunk within a highly regulated operational environment.
• Collaborate closely with an internal team member, offering technical guidance, knowledge transfer, and mentorship.
• Support security monitoring, threat detection, operational visibility, and compliance-related use cases across the Splunk platform.
• Partner with business and technical stakeholders to improve data organization, indexing strategies, and overall platform architecture.
• Assist with the deployment and integration of Cribl as part of the organization’s evolving logging and data management strategy.
• Develop and maintain searches, dashboards, reports, alerts, and correlation rules within Splunk.
• Utilize Splunk Enterprise Security (ES) to support security operations and incident detection activities.
• Work alongside external service partners on platform maintenance, upgrades, and related initiatives.
• Contribute to change management efforts while operating within a utility-sector security operations environment.

• Extensive hands-on experience with Splunk administration and engineering.
• Strong proficiency developing SPL queries, dashboards, reports, alerts, and detection content.
• Previous experience supporting Splunk as a SIEM platform in enterprise environments.
• Demonstrated knowledge of NERC CIP requirements and compliance-driven security operations.
• Experience working within Splunk Enterprise Security (ES).
• Ability to mentor junior resources and provide technical leadership.
• Strong communication skills with the ability to collaborate across multiple teams and business units.
• Experience participating in architectural discussions involving logging strategies, data pipelines, and indexing design.

Highly Preferred Qualifications

• Experience within the utility, energy, or critical infrastructure sectors.
• Familiarity with security operations centers (SOCs) supporting regulated environments.
• Hands-on experience with Cribl or comparable log routing and observability solutions.

MatchPoint Solutions is a fast-growing, young, energetic global IT-Engineering services company with clients across the US. We provide technology solutions to various clients like Uber, Robinhood, Netflix, Airbnb, Google, Sephora, and more! More recently, we have expanded to working internationally in Canada, China, Ireland, UK, Brazil, and India. Through our culture of innovation, we inspire, build, and deliver business results, from idea to outcome. We keep our clients on the cutting edge of the latest technologies and provide solutions by using industry-specific best practices and expertise. We are excited to be continuously expanding our team. If you are interested in this position, please send over your updated resume. We look forward to hearing from you!