Description

You will serve as the senior technical lead for Splunk platform management and advanced security incident response.

This role is on-site.

Responsibilities

• Deploy and configure Splunk Enterprise and Splunk Cloud for large-scale distributed environments.
• Optimize platform architecture to ensure stability and performance at scale.
• Develop, fine-tune, and maintain security monitoring rules and Alert Detection Strategy (ADS) templates.
• Analyze and triage security alerts, executing containment, mitigation, and remediation actions.
• Mentor lower-level SOC technicians on tool usage and incident response best practices.

Required Skills

• 5+ years of experience in security operations or related roles.
• Expertise in Splunk platform deployment, configuration, and core capabilities.
• Experience building customized Splunk apps, dashboards, and advanced visualizations.
• Proficiency in developing and optimizing Splunk security monitoring rules.
• Proven ability to manage complex security incident lifecycles from detection to remediation.
• Strong documentation skills for security incidents and responses per established procedures.
• Any Graduate degree.

Key Skills

Education

Any Graduate