Join SpaceX as a Splunk Engineer to deploy and support a distributed Splunk environment at an enterprise scale.
Posted by employer 2 days ago
First seen on Joblaze 1 day ago
Last verified on the company career page 1 day ago
Joblaze summary
The Splunk Engineer at SpaceX is tasked with deploying and managing a large-scale Splunk environment to ensure the integrity and performance of the company's data systems. Key skills include experience with Splunk administration, automation tools like Puppet or Ansible, and proficiency in writing complex SPLs for data analysis. This role is suited for professionals with at least two years of relevant experience, particularly those familiar with aerospace or mission-critical environments. The position requires on-site work and a commitment to maintaining high operational standards.
Quick facts
- Is the Splunk Engineer role remote?
- No — this is an on-site role in Starbase, TX, United States.
- How much experience is required?
- At least 2 years of relevant experience for this Splunk Engineer role.
- Where is the role based?
- SpaceX is hiring for this position in Starbase, TX, United States.
- What's the tech stack?
- Joblaze extracted these technologies from the posting: Ansible, Linux, Puppet, Python, Splunk.
- What seniority level is this role?
- SpaceX targets mid-level candidates for this position.
- Is this full-time or contract?
- Full-time for this Splunk Engineer role at SpaceX.
From the original posting
SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.
SPLUNK ENGINEER
SpaceX is hiring a Splunk Engineer to help protect and drive the SpaceX mission. Our engineers are responsible for deploying, administrating and supporting a distributed Splunk environment at an enterprise scale. As a highly visible and dynamic organization, we must value and guard against damage to our internal information, our physical hardware, and our reputation and brand. It is paramount that we defend against loss of control or confidence in our systems, to guarantee the highest probability of success.
RESPONSIBILITIES:
- Deploy, Admin and Support distributed Splunk environment at an enterprise scale.
- Standardize Splunk agent and enterprise deployment, configuration and management with automation.
- Help monitor and maintain the logging platform's performance, availability, and capacity.
- Write Complex SPLs to help Infosec and other IT organizations with their dashboards and alerts..
- Troubleshoot Splunk Instances and Splunk Universal Forwarder problems.
- Data onboarding, governance, enrichment and fields extraction for various use cases.
BASIC QUALIFICATIONS:
- 2+ years of experience administering or implementing Splunk in a professional setting.
- Experience writing complex regex for field mappings and identifying patterns.
- Experience with Puppet, Ansible, or other automation frameworks.
PREFERRED SKILLS AND EXPERIENCE:
- Certifications such as Splunk Enterprise Certified Architect, Splunk Enterprise Security Admin and Splunk Core Consultant.
- Familiarity with integrating enterprise applications and on-boarding new log sources.
- Familiarity with aerospace, satellite communications, launch vehicle, or factory-floor logging environments.
- Knowledge in the Common Information Model (CIM) with a strong understanding between the CIM and knowledge objects.
- Experience maintaining on-premises deployments of Splunk Core and Splunk Enterprise Security by supporting hundreds of users.
- Experience in identifying visibility gaps for SOC detections and onboarding custom data sources into Splunk.
- Experience with System Administration, DevOps, or Site Reliability Engineering.
- Experience developing or extending Splunk with Python (custom commands, modular inputs, alert actions, or apps) beyond basic SPL.
- Knowledge of Splunk SOAR (or equivalent security orchestration) and integrating Splunk with EDR, threat intel, or other security tools.
- Experience applying Splunk Machine Learning Toolkit (MLTK) or similar for anomaly detection in operational or security data.
- Hands-on experience with Git, CI/CD, or infrastructure-as-code practices specifically for Splunk configurations and knowledge objects.
- Advanced Linux systems knowledge for large-scale Splunk clusters.
- Experience supporting mission-critical, 24/7 operational environments with strict uptime and rapid incident response requirements.
ADDITIONAL REQUIREMENTS:
- Must be willing to work extended hours and weekends as needed.
- This role requires you to be onsite. Hybrid or remote work will not be considered.
Standard company text repeated across SpaceX's postings is omitted here.