Senior Splunk SIEM Engineer – Managed Services Consultant

About the role

We are looking for a Senior Splunk SIEM Engineer to join our Managed Services team. You will be responsible for the end‑to‑end administration of Splunk Enterprise and Splunk UBA environments, ensuring reliable security monitoring for our clients.

Key responsibilities

• Administer Splunk Enterprise: deployment, user management, license handling, upgrades, patching, log source onboarding, configuration, change and report management, backup and recovery.
• Develop security use cases using Splunk Enterprise Security, creating correlation rules, dashboards, alerts, reports and query templates.
• Manage support tickets related to the SIEM platform and troubleshoot log source issues.
• Periodically review and optimise existing Splunk configurations and propose enhancements.
• Support regulator audits by providing evidence from the SIEM solution.
• Develop parsing rules for non‑standard logs and configure threat feeds, IoCs and Sigma rules.
• Administer Splunk UBA: ingest CIM‑compliant data, raw events and HR data, monitor health via the UBA Monitoring App, and perform backups/failovers.

Required profile

• Minimum 5 years of experience in Splunk Enterprise and SIEM administration.
• Proven ability to design and implement security use cases and custom correlation rules.
• Experience supporting audits and working with regulatory requirements.
• Strong troubleshooting skills for log source and data ingestion issues.

Required skills

• Splunk Enterprise
• Splunk Enterprise Security (ES)
• Splunk User Behavior Analytics (UBA)
• SIEM administration and configuration
• Correlation rule development
• Dashboard and report creation
• Log source onboarding and parsing rule creation
• Threat feed / IoC / Sigma rule configuration
• Backup, recovery and change management processes