Sr Incident Commander

A little about us. Splunk is the key to enterprise resilience for the 11,000+ organizations that use our Unified Security and Observability Platform. We regularly appear on a lot of “Best Places to Work” lists and we think it’s because we encourage our Splunkers to bring their whole, authentic selves. So bring your work experience, problem-solving skills and talent, of course, but also bring your joy, your passion and all the things that make you, you. Because when you feel free to be you, it makes it a lot easier for us to be us.

**Role**

As a member of the Splunk Support Incident Management Team, you will be responsible for owning the response to high profile customer impacting incidents. In this role, you'll be part of a team of global incident commanders responsible for managing high severity incidents from initial triage through after-action review. This is a senior role at Splunk requiring an individual who can take charge in high stress situations and give direction to both customer personnel and to Splunk engineers to drive expeditious resolution of incidents. We are looking for a natural leader with proven knowledge of incident management frameworks, a demonstrable understanding of distributed systems environments and the ability to communicate clearly and effectively to technical and business audiences.

**Responsibilities**
- Take command of incidents by setting up or taking over a cross-functional technical bridge call, comprised of internal and external partners
- Work with SME’s to interpret key metrics from monitoring tools and facilitate a discussion aimed at building an incident action plan (and a backup plan if appropriate)
- Ensure that the partners have a deep understanding of the issue, the action plan and the path to resolution
- Ensure that each participant understands the incident management process and their role in that process
- Set clear incident resolution objectives (exit criteria) and timings.
- Provide direction and time management to keep the resolution effort on track and moving forward
- Host post incident review meetings to assist in the technical root cause analysis
- Operate as part of a 24X7 global team of Incident Commanders and ensure perfect handover of critical issues to other regions
- Actively participate and drive team process improvements
- Partner with outside groups to ensure cross training opportunities are realized

**Requirements**:

- 5+ years in incident management or technical support for an enterprise software company
- Strong leadership skills
- Proven knowledge of incident management and problem management frameworks (eg. ITIL) as there will be cross functionality responsibilities
- Demonstrable understanding of distributed systems concepts
- Ability to work multi-functionally and to influence/execute across groups
- Strong critical thinking, decision-making abilities
- Good interpersonal skills, both verbal and written.
- Executive presentation skills.
- Work well in dynamic changing environment and is comfortable with ambiguity.
- Negotiation, mediation and conflict management skills.
- Knowledge of Jira, SFDC, Confluence is a plus.
- Basic understanding of cloud technology.
- Experience with internal and external communication. Be able to articulate & translate complex, technical information into easily digested and understood, jargon free terms.
- Rotation on-call responsibilities which includes weekends/holidays.

We value diversity, equity, and inclusion at Splunk and are an equal employment opportunity employer. Qualified applicants receive consideration for employment without regard to race, religion, color, national origin, ancestry, sex, gender, gender identity, gender expression, sexual orientation, marital status, age, physical or mental disability or medical condition, genetic information, veteran status, or any other consideration made unlawful by federal, state, or local laws. We consider qualified applicants with criminal histories, consistent with legal requirements.