Senior Splunk Security Engineer

Overview

You have the chance to work for a global IT Managed Services business that supplies IT consulting, technical and support services, to a global portfolio of clients consisting of household brand names, including Fortune 100 companies. They operate in over 70 countries, have 25,000 + staff members, and received an award for the Clarivate Top 100 Global Innovator 2021 programme.

Our client is looking to appoint a talented and experienced Splunk Engineer to join a critical onsite team for their client. As a Senior Splunk Security Engineer, your primary responsibility will be to maintain and optimise Splunk infrastructure, ensuring the effective collection, indexing, and analysis of machine-generated data. You will work collaboratively with cross-functional security teams to implement and manage Splunk solutions that meet the operational and security needs of the organisation.

Key Responsibilities:
 

• Splunk Infrastructure Management: Install, configure, maintain, monitor, and troubleshoot Splunk components to ensure optimal performance and reliability.
• Data Ingestion and Parsing: Design and implement log ingestion strategies, develop parsing configurations, and collaborate with teams to onboard new data sources.
• Search and Reporting: Create and optimize search queries and reports and customise dashboards to visualise key performance indicators and security metrics.
• Security and Compliance: Implement security best practices, monitor for suspicious activities, and ensure compliance with regulations and policies.
• Automation and Scripting: Develop automation scripts using SPL and other languages to streamline tasks and enhance process efficiency.
• Documentation and Training: Maintain thorough documentation of configurations and processes and provide training and support to IT team members on Splunk usage.

Key Requirements:
 

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• Proven track record as a Splunk Engineer in enterprise environments; network and application security experience with Palo Alto, Bluecoat, F5 (LTM, ASM, APM), ASA VPN is beneficial.
• Deep knowledge of Splunk architecture and best practices.
• Proficient in SPL and scripting languages (Python or Bash).
• Expertise in designing and implementing data ingestion strategies.
• Strong security principles application within Splunk.
• Excellent problem-solving and troubleshooting abilities.
• Effective communication and team collaboration skills.