Splunk Data Engineer | SIEM & Platform Optimization Pro

Wipro; Dubai; On-site; AED 279,000 - 469,000; Full time

Job summary

Wipro in Dubai is seeking an experienced Splunk SME to lead Splunk administration, data onboarding, normalization, performance tuning and platform optimization. The role involves building dashboards, alerts, and reports; ingesting logs from Syslog, APIs, cloud, and databases; and driving automation with Python/Bash/PowerShell.

Applicants should demonstrate strong expertise in SHC, indexer clustering, CIM, and SPL development to enable scalable, compliant data platforms and proactive capacity

Qualifications

• Experience in Splunk administration (Indexers, Search Heads, Forwarders, Clustering).
• Data onboarding and CIM-compliant normalization.
• SPL development and query optimization.
• Dashboard, alert and report development with log ingestion from multiple sources.
• Performance tuning, troubleshooting and capacity management.

Responsibilities

• Develop, optimize and maintain Splunk enterprise platform components.
• Create dashboards, alerts and reports for security and operational use cases.
• Automate repetitive tasks using Python, Bash or PowerShell.
• Collaborate with SIEM operations and data teams to optimize data models.

Skills

Splunk Administration

Data Onboarding & Normalization

SPL Development

Dashboard & Alert Development

Log Ingestion

Performance Tuning

Props.conf & Transforms.conf

SHC & Indexer Clustering

Automation Scripting

Job description

Wipro in Dubai is seeking an experienced Splunk SME to lead Splunk administration, data onboarding, normalization, performance tuning and platform optimization. The role involves building dashboards, alerts, and reports; ingesting logs from Syslog, APIs, cloud, and databases; and driving automation with Python/Bash/PowerShell.

Applicants should demonstrate strong expertise in SHC, indexer clustering, CIM, and SPL development to enable scalable, compliant data platforms and proactive capacity