Splunk SIEM Engineer

Responsibilities

• Perform indexing and data ingestion activities, including parsing and indexing log sources to ensure searchable data.
• Identify and resolve ingestion issues such as parsing errors, timestamp extraction, and line breaking.
• Monitor Splunk system performance and optimize queries, dashboards, and data retention policies.
• Review Splunk architecture and provide recommendations for scalability, reliability, and cost efficiency.
• Design, configure, and maintain alerts, correlation searches, dashboards, and reports.
• Diagnose system failures, conduct root-cause analysis, and implement remediation actions.
• Ensure the Splunk environment follows security best practices and compliance requirements.
• Maintain technical documentation, runbooks, and user guides.
• Develop detection logic, alert severity thresholds, and standardized workflows for new use cases.
• Assess log quality and recommend source optimization to maximize value and reduce costs.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 3–5 years of relevant experience in Splunk administration, engineering, or SIEM operations.
• Strong understanding of Splunk architecture and data flow concepts.
• Solid knowledge of security operations and SIEM principles.
• Strong analytical and problem-solving skills for diagnosing system and data issues.
• Ability to work with technical documentation and structured operational processes.
• Familiarity with AI tools and technologies.

About the Company

Innovative Solutions (IS) is a leading Cybersecurity company established in 2003. Headquartered in Riyadh, we specialize in delivering comprehensive cybersecurity solutions and services, including Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services. Our mission is delivering secure and intelligent digital services that empower organizations.