Splunk SIEM Engineer

About the role

We are partnering with a global leader in consulting, technology services and digital transformation to find a Splunk SIEM Engineer. The role will focus on designing, developing and enhancing security monitoring solutions across multi‑platform environments, supporting large‑scale enterprises.

Key responsibilities

• Design, implement and maintain Splunk Enterprise Security and Microsoft Sentinel solutions, including data models and correlation rules.
• Manage log ingestion pipelines, data routing and transformation using tools such as Cribl Stream.
• Develop and automate security orchestration playbooks and incident response workflows.
• Perform threat detection, incident analysis and response for environments with 10,000+ endpoints.
• Document runbooks, procedures and technical guides for security operations teams.

Required profile

• Proven experience with Splunk Enterprise Security, Splunk Cloud and Microsoft Sentinel.
• Strong analytical skills in threat detection, incident response and security event analysis.
• Hands‑on experience with CI/CD tools (e.g., GitLab, Jenkins) and scripting languages.
• Excellent technical writing and communication abilities.

Required skills

• Splunk Enterprise Security
• Splunk Cloud
• Microsoft Sentinel
• Cribl Stream
• CI/CD tools (GitLab, Jenkins)
• Python
• PowerShell
• KQL
• SPL
• SQL
• AWS or Azure cloud security fundamentals