Senior Splunk Architect: Logs & Threat Detection

WLG; Henegouwen; Sur place; EUR 70 000 - 110 000; Plein temps

Résumé du poste

WLG in Belgium seeks a senior security monitoring engineer to own a large distributed Splunk estate and lead log collection and detection tooling for the cyber security data team.

You will design, deploy and maintain distributed architectures, monitor for anomalies, and drive improvements. The role requires hands-on Splunk work, Linux mastery, scripting, and the ability to communicate complex ideas clearly to non-specialists.

Qualifications

• Hands-on Splunk administration in large enterprise environments.
• Expert-level background in log collection and security monitoring management.
• Strong Linux administration and troubleshooting.
• Scripting to automate tasks: Bash, Python or Ansible.
• Solid grounding in computer and network security.
• Clear technical writing and ability to explain complex problems to non-specialists.
• Nice to have: CISSP, CISM or GIAC certifications.

Responsabilités

• Acting as the subject matter expert for the monitoring platform and feeding components.
• Designing, deploying and maintaining distributed architectures and keeping the estate installed and configured.
• Watching every component, spotting abnormal behaviour in logs, and taking action.
• Keeping the service within performance targets agreed with customers.
• Integrating external tooling and driving improvements to keep the environment current.
• Writing business cases and implementation plans for change boards and delivering changes.
• Producing documentation, procedures and design notes, plus reporting.
• Taking on-call rotations to ensure monitoring availability.

Connaissances

Splunk administration

Distributed architectures

Linux administration

Regular expressions

Bash scripting

Python

Ansible

Security monitoring

Log collection

Technical writing

Outils

Git

Description du poste

WLG in Belgium seeks a senior security monitoring engineer to own a large distributed Splunk estate and lead log collection and detection tooling for the cyber security data team.

You will design, deploy and maintain distributed architectures, monitor for anomalies, and drive improvements. The role requires hands-on Splunk work, Linux mastery, scripting, and the ability to communicate complex ideas clearly to non-specialists.