Senior Splunk Engineer

Senior Splunk Engineer

Position Overview

Role Title: Senior Splunk Engineer

Department: SecOps Technology Engineering

Core Technologies: Splunk SIEM, Splunk SOAR (Phantom), AWS, RHEL/AL2, Windows Server

Key Responsibilities

• Engineering Leadership Support: Provide technical leadership and support for existing and future SIEM and SOAR technologies (Splunk ES, Phantom, etc.).
• Platform Enhancement: Lead the continued technical enhancement of security platforms and drive the evolution of automation and orchestration across the ecosystem.
• Architecture Operations: Perform architectural design and technical support for SIEM and SOAR platform infrastructure, including system integration, interoperability, application components, and systems programming.
• Log Management: Handle the ingestion, normalization, data transformation, field extraction, event parsing, data preview, and application management of security log sources.
• Lifecycle Performance: Oversee patches, upgrades, capacity planning, and performance management.
• Detection Use Cases: Support the identification, development, and implementation of new detections and security use cases.
• Collaboration Leadership: Partner with IT Infrastructure teams in the end-to-end deployment of security technologies, collaborate with management across Cybersecurity and IT, and engage Global Businesses and Functions to drive a global uplift in cybersecurity awareness.
• Team Development: Train and mentor other members of the Logging and Operations team and the engineering function, fostering a culture of continuous self-improvement and technical mastery.
• Service Innovation: Design and drive the implementation of new service offerings, capability uplifts, and process improvements to protect the organization against a continuously changing threat landscape.

Required Qualifications Experience

• Proven professional experience within the Technology sector.
• Extensive experience in deploying, configuring, upgrading, and administering Splunk clusters at scale.
• Deep technical expertise in enterprise-level SIEM technology and logging frameworks.
• Proven ability to perform installation, configuration management, capacity planning, license management, and data integration within Splunk.
• Experience with cloud infrastructure (AWS) and operating systems (Linux/RHEL/AL2 and/or Windows Server).
• Strong background in systems administration, security log normalization, and use case development (Splunk ES, Splunk SOAR).

Mandatory Skills Competencies

• Core Expertise: Splunk (Mandatory)
• Scripting Programming: Python, Bash, PowerShell
• Communication: Exceptional ability to communicate complex and technical issues clearly to diverse audiences.
• Professional Attributes: Self-motivated, high sense of urgency, personal integrity, and a team-focused mentality with the ability to work effectively alongside diverse stakeholders.
• Change Management: Demonstrated ability to orchestrate, manage, and successfully implement major procedural and technological change within a complex global organization.
• Education: Formal education and advanced degree in Information Security.

Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.