Senior Splunk Engineer

Responsibilities

• Design and implement end-to-end Splunk solutions including data ingestion, parsing, indexing, and search optimization
• Develop and maintain custom correlation rules, alerts, dashboards, and visualizations
• Onboard new log sources from infrastructure, security, application, and cloud systems
• Perform regular health checks, performance tuning, and license usage monitoring
• Support threat detection initiatives by translating security use cases into actionable Splunk queries
• Maintain Splunk Enterprise Security (ES) configurations, including CIM compliance and risk-based alerting
• Automate tasks and processes using Python, Bash, or PowerShell
• Provide technical guidance and mentoring to junior engineers

Requirements

• 5+ years of hands-on experience in SIEM engineering
• 3+ years focused on Splunk Enterprise or Splunk Cloud
• Proficiency in SPL (Search Processing Language) and CIM normalization
• Experience integrating diverse log sources (firewalls, endpoints, cloud, identity systems)
• Strong understanding of security operations and incident response workflows
• Experience with scripting and automation (Python, Bash, PowerShell)
• Knowledge of networking, security protocols, and system administration
• Splunk Core Certified Power User certification

Preferred Qualifications

• Splunk Enterprise Security Certified Admin
• Splunk Certified Architect or Consultant
• CompTIA Security+ or CISSP
• Familiarity with Splunk UBA, ITSI, and SOAR

About the Company

IT Security C&T is an innovative, fast-growing security consulting and training company delivering comprehensive security solutions to customers around the MENA region.