Description
We are seeking a skilled Splunk SIEM Engineer to design, develop, and improve software that provides business, platform, and technology capabilities for our customers and colleagues.
Responsibilities:
- Develop and deliver high-quality software solutions using industry-aligned programming languages, frameworks, and tools.
- Collaborate with cross-functional teams to define software requirements, devise solution strategies, and ensure seamless integration and alignment with business objectives.
- Participate in code reviews and promote a culture of code quality and knowledge sharing.
- Stay informed about industry technology trends and innovations, and contribute to the organisation's technology communities.
- Adhere to secure coding practices to mitigate vulnerabilities and ensure secure software solutions.
- Implement effective unit testing practices to ensure proper code design, readability, and reliability.
Requirements:
- Minimum qualification: bachelor's degree.
- Multi-platform SIEM expertise: proven experience with Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture.
- Security operations: strong analytical skills in threat detection, incident response, and security event analysis.
- Data pipeline management: hands-on experience with log ingestion, data routing, and transformation.
- SOAR & automation: experience with Security Orchestration platforms and automated response workflows.
- Network security fundamentals: working knowledge of network architectures, firewalls, and common attack vectors.
- Communication & documentation: excellent technical writing and communication skills.
Nice to Have:
- Cloud security & modern infrastructure: proficiency with AWS/Azure cloud security and containerized environments.
- Programming & scripting: advanced skills in Python, PowerShell, KQL, SPL, and SQL.
- Security certifications: professional certifications such as CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja.
- Extended security stack: experience with EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms.