Splunk Security Engineer — Onsite in Mons (Secret)

VulnU; Henegouwen; Presencial; EUR 97.000 - 125.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Retirement match

Paid parental leave

Descripción de la vacante

GDIT is seeking a Splunk Security Engineer to support NATO SOFCOM missions on-site in Mons, Belgium. You will administer Splunk Enterprise Security, onboard data sources, and develop SPL queries and dashboards to enable threat detection and rapid investigations.

The role requires 5+ years in cyber/SIEM, active Secret to start, and Splunk Enterprise Admin or ES Admin certifications, with ITIL Foundation. On-site work and Belgian compliance are part of the package.

Formación

• BA/BS or equivalent years of experience required.
• 5+ years of related experience in cyber / SIEM.
• Strong Splunk, CIM tuning and SPL skills.

Responsabilidades

• Administer and optimize Splunk Enterprise Security, indexers, search heads, forwarders, deployment servers, indexes and license consumption.
• Develop and tune SPL queries, correlation searches, dashboards, alerts, security analytics and threat-detection use cases mapped to relevant tactics and techniques.
• Onboard and normalize authorized log sources, maintain CIM mappings and validate log quality, integrity and retention.
• Support threat hunting, event triage, incident investigations, evidence collection and coordination with the cybersecurity team.
• Document approved configuration changes, procedures, deployment architecture, incident findings and SIEM health metrics.

Conocimientos

Dashboard Management

Query Language

Splunk Administration

Educación

BA/BS or equivalent years of experience

Descripción del empleo

GDIT is seeking a Splunk Security Engineer to support NATO SOFCOM missions on-site in Mons, Belgium. You will administer Splunk Enterprise Security, onboard data sources, and develop SPL queries and dashboards to enable threat detection and rapid investigations.

The role requires 5+ years in cyber/SIEM, active Secret to start, and Splunk Enterprise Admin or ES Admin certifications, with ITIL Foundation. On-site work and Belgian compliance are part of the package.