Splunk Administrator

Responsibilities

• Administration, operation, and maintenance of the Splunk Enterprise Security platform
• Supervision of platform availability, performance, and security
• Participation in the continuous improvement and evolution of the Splunk environment
• Management of configurations, log sources, and dashboards
• Optimization of detection use cases
• Collaboration with SOC and CSIRT teams for detection and incident response
• Technical support and guidance for user teams

Requirements

• Minimum 5 years of experience in a similar role
• Solid experience in cybersecurity and SIEM environments
• Expertise in Splunk Enterprise Security administration
• Experience with SIEM platform operation and maintenance
• Proficiency in log management and analysis
• Knowledge of SOC processes and incident response
• Proficiency in Linux environments

Preferred Qualifications

• Administration of Splunk Core / ES
• Automation skills using Python or Shell
• Knowledge of cybersecurity environments (SOC, CSIRT)

About the Company

HELPLINE specializes in user support outsourcing and the implementation of an AI-augmented employee experience. Part of the Everience group, HELPLINE provides IT asset management, GRC, and application support to over 200 clients worldwide.