Senior Splunk Cloud SIEM Engineer

Talent; City of Parramatta; On-site; AUD 150,000 - 210,000; Full time

Job summary

Talent in Sydney has a Senior Cyber Security Engineer role focused on hands-on Splunk Cloud engineering for an enterprise environment. You will design, implement, and optimize the Splunk Cloud architecture while onboarding new log sources and tuning ES correlation searches. The role combines platform architecture, engineering, implementation and BAU support, with mentorship for five to six engineers, mostly onsite at Sydney Olympic Park.

Qualifications

• Extensive hands-on Splunk experience at senior level.
• Strong experience with Splunk Cloud and Enterprise Security.
• Experience across platform architecture, configuration and implementation.
• Log onboarding, forwarders, indexes, data models and parsing.

Responsibilities

• Design and improve the Splunk Cloud architecture.
• Deliver hands-on Splunk engineering and implementation.
• Onboard and integrate new log sources and security technologies.
• Configure parsing, indexing, data models, dashboards and alerts.
• Develop and tune Splunk ES correlation searches and detection use cases.
• Monitor platform health, performance and data quality.
• Translate designs into working technical solutions.
• Support BAU activities, incidents and major programs.
• Identify opportunities to improve platform capability and efficiency.
• Mentor and upskill engineers.

Skills

Splunk

SIEM

Cloud security

Mentoring

BAU support

Tools

Splunk Cloud

Splunk Enterprise Security

SPL

Job description

Talent in Sydney has a Senior Cyber Security Engineer role focused on hands-on Splunk Cloud engineering for an enterprise environment. You will design, implement, and optimize the Splunk Cloud architecture while onboarding new log sources and tuning ES correlation searches. The role combines platform architecture, engineering, implementation and BAU support, with mentorship for five to six engineers, mostly onsite at Sydney Olympic Park.