Splunk Subject Matter Expert- Remote

CalanceUnited States🇺🇸United StatesPosted Oct 16, 2026

Why This Role Stands Out

As a remote Splunk Subject Matter Expert, you'll drive critical security and observability initiatives by leading custom data onboarding and optimizing ingestion pipelines, offering significant opportunities for technical growth. This role is ideal for an independent and experienced Splunk professional looking to make a substantial impact in a dynamic environment. Embrace this chance to elevate your expertise and contribute to cutting-edge solutions from anywhere.

Quick Overview

Seniority

Mid Senior

Work mode

Remote

Location

United States

Posted

Yesterday

SplunkOnboarding

Job Description

Role Focus
Seeking a Splunk Subject Matter Expert with deep experience in Getting Data In (GDI) to support security and observability initiatives.

Core Responsibilities
Lead custom data onboarding across a diverse tool ecosystem
Configure and optimize parsing, including props.conf & transforms.conf
Re-evaluate existing tools as data sources for Security & Observability use cases
Support Splunk platform stability and scalability initiatives
Required Experience
Strong Splunk Enterprise (Core) experience
Hands-on expertise with: oGDI / data ingestion pipelines oCustom source onboarding oParsing and data normalization oProps & transforms configurations
Ability to work independently across multiple data sources
Preferred / Nice to Have
Experience upgrading Splunk instances to v10
General OT (Operational Technology) environment exposure
No requirement for Splunk Enterprise Security (ES)
Modules / Tooling
Core Splunk Enterprise only
ES not required