About the role
Your work profile.
We are seeking SIEM Engineer (Splunk) to support the ongoing
operations and optimization of our Splunk-based log management infrastructure.
These resources will play a critical role in ensuring effective log ingestion,
alerting, dashboarding, and system performance across both on-premises and
cloud environments.
Key Responsibilities (Project-Specific):
- Splunk
Infrastructure Management: Maintain and optimize Splunk environments
(on-premise and cloud).
- Ensure
consistent and reliable log ingestion from diverse systems and
applications.
- Data
Onboarding & Management: Define and implement data onboarding
processes, field extractions, and normalization.
- Collaborate
with asset-owning teams to ensure forwarder coverage and log
completeness.
- Alerting
& Dashboards: Create and maintain dashboards and custom SPL queries
for operational visibility.
- Ensure
accuracy and effectiveness of alerting mechanisms within Splunk.
- Troubleshooting
& Support: Investigate and resolve issues related to Splunk alerts
and data ingestion.
- Provide
solutions and recommendations for improving system performance.
- Automation
& Documentation: Assist in developing automation tools for efficient
Splunk management.
- Document
procedures, configurations, and architectural changes.
Education:
- Bachelor’s
degree in Information Security, Computer Science, or a related field. A
Master’s degree in Cybersecurity or Business Management is preferred.
Required Skill Set:
- Proficiency
in Splunk Query Language (SPL) for creating searches, alerts, and
dashboards.
- Experience
with Splunk data onboarding, field extractions, and log normalization.
- Familiarity
with AWS Cloud environments and integration with Splunk.
- General
scripting knowledge (Python preferred) for automation and tooling.
- Strong
troubleshooting skills and ability to resolve complex Splunk-related
issues.
- Experience
collaborating with cross-functional teams in enterprise environments.
- Strong
documentation and communication skills.
- Ability
to manage time effectively and meet operational goals.