Splunk Developer

Splunk Developer

Location: Chicago, IL (Hybrid or On-site)

A leading credit card and payments organization is seeking a Splunk Developer to help design, build, and maintain enterprise-scale observability, monitoring, and security analytics solutions. In this role, you’ll work closely with engineering, infrastructure, and security teams to transform high-volume transactional and system data into actionable insights.

This is a hands‑on role focused on Splunk development, data onboarding, dashboarding, alerting, and performance optimization in a highly regulated financial environment.

• Design, develop, and optimize Splunk dashboards, reports, and alerts for operational, application, and security monitoring

• Write and optimize complex SPL (Search Processing Language) queries

• Build and maintain Splunk apps and add‑ons
  , including custom field extractions and data models

• Onboard and normalize data from multiple sources (applications, APIs, cloud platforms, databases, security tools)

• Configure and manage Splunk forwarders (Universal and Heavy)

• Support incident response, root‑cause analysis, and compliance reporting

• Partner with infrastructure, Dev Ops, and security teams to improve observability and system reliability

• Ensure Splunk environments meet performance, scalability, and security best practices

• 3+ years of hands‑on Splunk development experience

• Strong proficiency in SPL
  , dashboards, alerts, and visualizations

• Experience with
  data onboarding
  , parsing, and transformations (props.conf, transforms.conf)

• Solid scripting skills in Python and/or Bash

• Experience working in Linux-based environments

• Familiarity with REST APIs and integrating external data sources

• Understanding of log management, monitoring, and observability concepts

• Experience working with high-volume transactional data in financial or regulated environments

• Experience with
  Splunk Enterprise Security (ES) or security use cases

• Familiarity with cloud platforms (AWS, Azure, or GCP)

• Experience with
  CI/CD
  , Git, and infrastructure‑as‑code tools

• Knowledge of PCI DSS
  , SOX, or financial services compliance

• Exposure to Kafka, streaming data, or real‑time analytics

• Work on mission‑critical systems supporting payment and credit card transactions

• Collaborate with experienced engineers in a data‑driven environment

• Competitive compensation, strong benefits, and long‑term growth opportunities

• Chicago‑based role with flexibility depending on team needs