Senior Splunk Engineer

Role Overview

Design and implement end-to-end Splunk solutions, develop and maintain custom correlation rules, alerts, dashboards, and visualizations to support security monitoring and incident response.

What You Will Do

Perform regular health checks, indexer and search head performance tuning, license usage monitoring, and configuration backups. Support threat detection initiatives, troubleshoot ingestion failures, parsing errors, and inefficient searches.

Why It Might Be a Fit

Collaborate with SOC, threat intelligence, and infrastructure teams, maintain Splunk Enterprise Security (ES) configurations, implement and manage data retention policies and storage utilization in line with compliance requirements.

Requirements

• 5+ years of hands-on experience in SIEM engineering with at least 3 years focused on Splunk Enterprise or Splunk Cloud
• Proficient in SPL (Search Processing Language), data onboarding, and CIM normalization
• Experience integrating diverse log sources including firewalls, endpoints, cloud (AWS, Azure), identity systems, and threat intel feeds
• Strong understanding of security operations, detection engineering, and incident response workflows
• Familiarity with Splunk ES, UBA, ITSI, and SOAR (preferred but not mandatory)
• Experience with scripting and automation (Python, Bash, PowerShell)
• Good knowledge of networking, security protocols, and system administration (Windows/Linux)
• Exposure to regulatory and compliance requirements such as ISO 27001, NCA, SAMA, PCI-DSS, etc.

Benefits

• In-person collaboration with flexibility to support wellbeing, productivity, individual work styles, and life circumstances
• Inclusive environment where everyone can thrive