> Markdown version of [/jobs/ext/2059655-siem-splunk-specialist](https://www.wearedevelopers.com/jobs/ext/2059655-siem-splunk-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SIEM/Splunk Specialist

- **Company:** Vsg Business Solutions
- **Location:** Austin, TX, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Backup Devices, Cluster Analysis, Linux, Disaster Recovery, Domain Name System (DNS), Parsing, Security Information and Event Management, Systems Integration, TCP/IP, Cloud Platform System, Data Ingestion, System Availability, Mitre Att&ck, Firewalls (Computer Science), Splunk, Data Pipelines, Cisco
- **Published:** August 14, 2026
- **Apply:** https://www.careerjet.com/jobad/us580e7d6012689a156b3394b94b6989bf

## About the Role

5 10+ years of experience in Splunk engineering/administration
Hands-on experience with:
Splunk architecture and distributed deployments
Data onboarding and parsing
Search Processing Language (SPL)
Experience with Cisco ecosystem integrations
Strong knowledge of:
Linux/Unix systems
Networking (TCP/IP, DNS, firewalls)
Security frameworks (NIST, MITRE ATT&CK)
Experience supporting large-scale enterprise environments

## Description

Implementation & Deployment
Lead the end-to-end rollout of Splunk Enterprise or Splunk Cloud Platform across the organization
Design and implement scalable Splunk architectures (indexers, search heads, forwarders, clustering)
Integrate Splunk with other Cisco platforms:
Develop data onboarding strategies (logs, metrics, events, network telemetry)
Operations & Support
Provide day-to-day administration of Splunk environments
Monitor system health, performance, and data ingestion pipelines
Troubleshoot ingestion issues, search performance, and infrastructure bottlenecks
Manage upgrades, patches, and system tuning
Ensure high availability, disaster recovery, and backup strategies, The Dedicated Resource will report to 701 W. 51st Street, Austin, TX 78751. Normal business hours are [8:00 AM to 5:00 PM Monday through Friday except for holidays observed by the State of Texas].


## Related Videos

- [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)
- [SRE Methods In an Agency Environment](https://www.wearedevelopers.com/videos/348-sre-methods-in-an-agency-environment)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Top Big Data Technologies That You Need to Know](https://www.wearedevelopers.com/magazine/108-top-big-data-technologies-that-you-need-to-know)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)