Senior Splunk Security Engineer — Remote AU

Kelaru; Sydney; Remote; AUD 140,000 - 150,000; Full time

Job summary

Kelaru is seeking a Cyber Security Engineer to own onboarding of applications and data sources into Splunk, building out logging and detection coverage across the environment. The role evolves to include CyberArk PAM operations, AWS logging, and DevSecOps practices such as automation, CI/CD, and infrastructure-as-code in a large, enterprise-scale setting.

The candidate will work with senior engineers onSplunk upgrades, clustering, and health, contributing to a secure, scalable platform across

Qualifications

• 3+ years hands-on Splunk engineering or administration, including data onboarding (forwarders, props/transforms, TAs, CIM).
• Experience supporting a production Splunk platform: upgrades, clustering, capacity and health.
• Solid Linux fundamentals, plus working knowledge of Windows Server.
• Networking basics: syslog, firewalls, DNS and connectivity troubleshooting.

Responsibilities

• Onboarding applications and data sources into Splunk end to end: Universal and Heavy Forwarders, syslog, HEC, props and transforms, TAs and CIM normalisation.
• Work with application owners to define what needs to be logged and get it in cleanly.
• Troubleshoot ingestion, parsing, timestamp and field extraction issues.
• Support and uplift the Splunk platform: upgrades, indexer and search head clusters, deployment server and forwarder fleet management.
• Work with Splunk Enterprise Security: CIM compliance, correlation searches and tuning.
• Contribute to CyberArk PAM operations and AWS logging integrations where needed.
• Automate repetitive work with scripting and infrastructure-as-code.
• Deliver production changes, including occasional out-of-hours change windows.
• Document what you build so it can be handed over.

Skills

Splunk engineering

Linux fundamentals

Tools

Splunk

CyberArk

AWS

Terraform

CloudFormation

Ansible

Git pipelines

Job description

Kelaru is seeking a Cyber Security Engineer to own onboarding of applications and data sources into Splunk, building out logging and detection coverage across the environment. The role evolves to include CyberArk PAM operations, AWS logging, and DevSecOps practices such as automation, CI/CD, and infrastructure-as-code in a large, enterprise-scale setting.

The candidate will work with senior engineers onSplunk upgrades, clustering, and health, contributing to a secure, scalable platform across