SIEM Engineering

Position Overview:

We are seeking a highly skilled and motivated individual to lead our SIEM engineering team. The SIEM Engineer will be responsible for overseeing all technical aspects of our SIEM infrastructure, including design, implementation, optimization, and maintenance. This role requires deep technical expertise in SIEM.

Responsibilities:

1. Splunk Infrastructure Design and Implementation

• Design, deploy, and maintain scalable and reliable Splunk infrastructure to meet business needs.
• Develop best practices and standards for Splunk configuration, deployment, and usage.
• Collaborate with other teams to integrate Splunk with existing systems and tools.

2. Performance Optimization and Monitoring

• Optimize Splunk performance and efficiency through tuning, capacity planning, and resource optimization.
• Implement and maintain monitoring solutions to ensure the health and availability of Splunk infrastructure.
• Troubleshoot and resolve performance issues and system outages in a timely manner.

3. Security and Compliance

• Implement and enforce security best practices for Splunk, including access controls, data encryption, and auditing.
• Ensure compliance with relevant regulations and industry standards (e.g., GDPR, HIPAA, PCI DSS).

4. Documentation and Knowledge Sharing

• Create and maintain comprehensive documentation for Splunk infrastructure, configurations, and processes.
• Provide training and knowledge sharing sessions to empower team members and other stakeholders.

5. Vendor Management and Strategic Planning

• Evaluate Splunk-related technologies, tools, and services from vendors and make recommendations for adoption.
• Collaborate with stakeholders to develop strategic plans and roadmaps for Splunk infrastructure and capabilities. 

Technical Qualifications:

• Candidate must possess at least a Diploma, Advanced/Higher/Graduate Diploma, Bachelor's Degree, Post Graduate Diploma, Professional Degree, Master's Degree, Computer Science/Information Technology, Engineering (Computer/Telecommunication), Engineering (Electrical/Electronic), Engineering (Others), Science & Technology or equivalent.
• Required language(s): English
• Extensive experience (5-7+ years) in designing, implementing, and managing Splunk infrastructure in large-scale environments.
• Deep technical expertise in Splunk architecture, deployment, and administration, including Splunk Enterprise, Splunk Cloud and SOAR.
• Proficiency in Splunk search language (SPL) and building complex queries, dashboards, and reports on demand as needed by the stakeholders.
• Strong scripting skills (e.g., Python, Bash,PowerShell) for automation and integration with Splunk.
• Solid understanding of networking, security, and system administration concepts.
• Experience with Splunk app development and customization.
• Splunk certifications (e.g., Splunk Certified Admin, Splunk Certified Architect) are highly desired
• Knowledge/certified/operated on any of the Cloud Service Provider (CSP) : AWS or Azure or GCP
• Current or previous experience with other SIEM tools is encouraged to apply