Sr. Splunk Engineer

About the Job
As a Sr. Splunk Engineer, you will be responsible for designing and implementing end-to-end Splunk solutions, including data ingestion, parsing, indexing, and search optimization. You will develop and maintain custom correlation rules, alerts, dashboards, and visualizations to support security monitoring and incident response. Key responsibilities include onboarding new log sources using best practices, performing health checks and performance tuning, supporting threat detection initiatives, and collaborating with various teams to ensure data relevance and quality. You will also maintain Splunk Enterprise Security configurations, implement data retention policies, automate tasks using scripts, and provide guidance to junior engineers.

Required Skills & Experience:

• 5+ years of hands-on experience in SIEM engineering with at least 3 years focused on Splunk Enterprise or Splunk Cloud.
• Proficient in SPL (Search Processing Language), data onboarding, and CIM normalization.
• Experience integrating diverse log sources including firewalls, endpoints, cloud (AWS, Azure), identity systems, and threat intel feeds.
• Strong understanding of security operations, detection engineering, and incident response workflows.
• Familiarity with Splunk ES, UBA, ITSI, and SOAR (preferred but not mandatory).
• Experience with scripting and automation (Python, Bash, PowerShell).
• Good knowledge of networking, security protocols, and system administration (Windows/Linux).
• Exposure to regulatory and compliance requirements such as ISO 27001, NCA, SAMA, PCI-DSS, etc.

Language Requirements:

• Strong proficiency in English (additional languages may be a plus).

At the company, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, and individual work styles. We are committed to fostering an inclusive environment where everyone can thrive.