Senior Splunk SIEM Platform Owner

Wlgroup; Henegouwen; Sur place; EUR 90 000 - 120 000; Plein temps

Résumé du poste

Wlgroup seeks a senior Splunk/Log Monitoring Engineer to own a large distributed Splunk estate and be the security data team's senior technical voice. This role is hands-on and not a ticket-based queue position.

You will design, deploy and maintain distributed architectures, keep the estate installed and performing, and drive improvements to stay current with evolving threats and tech. On-call duties are included.

Qualifications

• Hands-on Splunk administration in a large enterprise: deployment, installation, configuration and maintenance.
• Expert-level background in log collection and security monitoring management.
• Strong Linux administration and troubleshooting, with regex proficiency.
• Scripting to remove repetitive work: Bash, Python or Ansible.
• Solid grounding in security, networking and OS weaknesses.
• Clear technical writing; able to explain complex problems to non‑experts.
• Nice to have: CISSP, CISM or GIAC certifications and related security tools.

Responsabilités

• Acting as the subject matter expert for the monitoring platform and everything that feeds it — advising other teams, sizing changes and taking the technical lead on related projects.
• Designing, deploying and maintaining distributed architectures, and keeping the whole estate installed, configured and behaving.
• Watching every component, spotting abnormal behaviour early in system, security and application logs, and taking the technical and the non-technical action needed to clear it.
• Keeping the service inside the performance targets agreed with the customers it protects.
• Integrating external tooling, and proposing the improvements that keep the environment current instead of merely alive.
• Writing up the business case and the implementation plan for change boards, then delivering the approved change with the other teams involved.
• Producing documentation, procedures and design notes, plus technical and executive reporting and the occasional briefing to a senior audience.
• Taking a turn on call, so that monitoring stays available when something breaks out of hours.

Connaissances

Splunk administration

Security monitoring

Linux administration

Scripting (Bash/Python/Ansible)

Technical writing

Log analysis

On-call experience

Formation

CISSP/CISM/GIAC certification

Outils

SOAR

UBA

Custom parsers

Git

Cloud log collection

Description du poste

Wlgroup seeks a senior Splunk/Log Monitoring Engineer to own a large distributed Splunk estate and be the security data team's senior technical voice. This role is hands-on and not a ticket-based queue position.

You will design, deploy and maintain distributed architectures, keep the estate installed and performing, and drive improvements to stay current with evolving threats and tech. On-call duties are included.