Cyber Security Administrator - Splunk at Blackbaud, Inc. in Philadelphia, PA

About the role:

As a member of the Cyber Security organization at Blackbaud, the Security Platforms & Automation Splunk Administrator will have demonstrable experience and expertise in managing a large Splunk Enterprise or Splunk Cloud environment. The Splunk Administrator is a technology and process focused security professional with an emphasis in information security, secure system implementation, and maintenance. The Splunk Administrator will review, assess, recommend, and implement technical controls to ensure the Splunk environment and related security platforms are well managed and resilient. The Splunk Administrator will also ensure that routine maintenance and configuration management are well maintained and assist the Splunk Technical Lead as required.

What you'll be doing:

Performs activities related to Splunk Cloud and Splunk Enterprise Security, SIEM, and additional logging related security platforms and functions such as:

• ​Implementation
• Configuration
• Management
• Maintenance
• Data On-boarding
• Audit Evidence Collection
• Dashboard Creation
• SPL Query Creation and Tuning
• Access Control
• Performs other activities related to Blackbaud’s Cyber Security Program

Who we’re looking for:

• 6+ years experience in the management of information systems with at least 4+ years of formal experience in information security
• 2+ years of Splunk Enterprise/Splunk Cloud experience
• Splunk Specific Technologies and Concepts such as: Splunk Enterprise/Cloud data onboarding principles
• Understanding of Splunk components to include but not limited to: Splunk Search Processing Language (SPL), Enterprise Security, HTTP Event Collector (HEC), Input Data Manager (IDM), Deployment Servers, Universal Forwarders (UF), and Heavy Forwarders (HF)
• BS in Computer Information Systems, Computer Science, Information Systems Management, or equivalent professional experience