Splunk Engineer

Responsibilities

• Install, configure, and manage Splunk Enterprise / Splunk ES (Standalone, Distributed, Clustered)
• Configure and maintain Indexers, Search Heads, Forwarders, Deployment Server, and Cluster Master
• Onboard and integrate logs from servers, network devices, security tools, endpoints, and cloud platforms
• Perform use case creation, correlation rule development, and fine-tuning aligned with MITRE ATT&CK framework
• Optimize detection logic to reduce false positives and improve alert quality
• Develop and maintain dashboards, alerts, reports, and advanced SPL queries
• Support SOAR playbook development and automation workflows for incident response
• Monitor Splunk platform health, performance tuning, EPS optimization, and storage management
• Troubleshoot ingestion, parsing, and search performance issues
• Implement RBAC, data retention policies, and security hardening
• Support version upgrades, patching, backup, and DR setup

Requirements

• 5+ years of experience in Splunk administration or engineering
• Expertise in Splunk Enterprise and Splunk ES
• Experience with SIEM use case development and automation support for SOC operations
• Proficiency in SPL (Search Processing Language)
• Knowledge of MITRE ATT&CK framework

About the Company

Noventiq is a leading global solutions and services provider in digital transformation and cybersecurity, helping organizations connect with best-in-class IT vendors and proprietary solutions.