Splunk Admin/ Specialist

CyberGate Defense L.L.C; Abu Dhabi; On-site; AED 120,000 - 180,000; Full time

Job summary

A leading company in the cybersecurity sector is seeking a skilled Splunk Administrator to enhance their security and operational intelligence. The ideal candidate will manage and optimize Splunk environments, ensuring data integrity while collaborating with IT teams. This role requires substantial experience in Splunk administration, expertise in data onboarding, and a proactive approach to problem-solving.

Qualifications

• 5 to 8+ years of hands-on experience as a Splunk Administrator.
• Strong understanding of Splunk architecture and components.
• Proficiency in Splunk Search Processing Language (SPL).

Responsibilities

• Manage, maintain, and scale Splunk infrastructure.
• Monitor and optimize Splunk system health.
• Administer Splunk users, roles, and permissions.

Skills

Splunk administration

Problem-solving

Analytical skills

Communication

Data onboarding

Performance optimization

Education

Bachelor's degree in Computer Science or related field

Job description

CyberGate Defense is looking for a skilled and dedicated Splunk Administrator to join our growing team in Abu Dhabi , UAE] ! If you're passionate about data, security, and optimizing Splunk environments to their fullest potential, we want to hear from you.

As a Splunk Administrator, you will be crucial in managing, maintaining, and scaling our Splunk infrastructure, ensuring optimal performance and data integrity for our security and operational intelligence needs.

Key Responsibilities :

• Splunk Infrastructure Management : Install, configure, and maintain Splunk Enterprise deployments, including indexers, search heads, forwarders, and deployment servers.
• Performance Tuning & Optimization : Monitor Splunk system health, troubleshoot issues, and optimize performance for searches, dashboards, and data ingestion.
• Data Onboarding & Management : Configure data inputs, manage data parsing, field extractions, and ensure data quality and integrity from various sources (logs, metrics, etc.).
• User & Access Management : Administer Splunk users, roles, and permissions, ensuring adherence to security best practices.
• Security & Compliance : Implement and maintain security controls within the Splunk environment, including data encryption, access logging, and compliance with organizational policies.
• Troubleshooting & Support : Provide expert-level support for Splunk-related issues, working with internal teams to resolve problems efficiently.
• Upgrade & Patch Management : Plan and execute Splunk upgrades, patches, and hotfixes with minimal downtime.
• Documentation : Create and maintain comprehensive documentation for Splunk architecture, configurations, and operational procedures.
• Collaboration : Work closely with security analysts, engineers, and other IT teams to understand their data requirements and provide tailored Splunk solutions.

Qualifications & Skills :

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 5 to 8+ years of hands-on experience as a Splunk Administrator in an enterprise environment.
• Proven expertise in Splunk Enterprise administration , including clustered environments (indexer clustering, search head clustering).
• Strong understanding of Splunk architecture and components.
• Proficiency in Splunk Search Processing Language (SPL) for complex queries, dashboards, and reports.
• Experience with data onboarding from various sources (e.g., Windows, Linux, network devices, applications, cloud services).
• Familiarity with regular expressions (regex) for data parsing.
• Knowledge of scripting languages (e.g., Python, Shell) for automation is a plus.
• Understanding of network protocols, security concepts, and IT operations.
• Excellent problem-solving, analytical, and communication skills.
• Splunk Certified Administrator or other relevant Splunk certifications are highly preferred.