SIEM / Splunk Architect

Next Ventures; Helsinki; On-site; EUR 90,000 - 130,000; Full time

Job summary

Next Ventures in Helsinki seeks an experienced Splunk specialist to lead complex SIEM transformation and security architecture initiatives within a large enterprise environment.

You will assess, design and deliver Splunk transformations, develop scalable Splunk Enterprise and Splunk ES architectures, and manage data onboarding, alerts and dashboards, collaborating with security, architecture and operations teams to elevate threat detection and SOC capabilities.

Qualifications

• 8+ years in Security Operations, SIEM or Security Architecture.

Responsibilities

• Assess the existing SIEM environment and recommend strategic improvements.
• Design and deliver Splunk transformation or migration programmes.
• Develop scalable Splunk Enterprise and Splunk Enterprise Security architectures.
• Manage data onboarding, correlation searches, alerts and dashboards.
• Improve security monitoring, threat detection and SOC capabilities.
• Translate technical findings into clear recommendations for senior stakeholders.
• Work closely with security, architecture and operational teams.

Skills

Splunk Enterprise

Splunk Enterprise Security

SIEM architecture

Threat detection

Stakeholder management

SOC operations

Data onboarding

Dashboards and alerts

Tools

Microsoft Sentinel

IBM QRadar

Google SecOps

Elastic

Securonix

Trend Micro

Job description

We are supporting a leading global technology and consulting organisation seeking an experienced Splunk specialist to lead complex SIEM transformation and security architecture initiatives within a large enterprise environment.

Key Responsibilities

• Assess the existing SIEM environment and recommend strategic improvements.
• Design and deliver Splunk transformation or migration programmes.
• Develop scalable Splunk Enterprise and Splunk Enterprise Security architectures.
• Manage data onboarding, correlation searches, alerts and dashboards.
• Improve security monitoring, threat detection and SOC capabilities.
• Translate technical findings into clear recommendations for senior stakeholders.
• Work closely with security, architecture and operational teams.

Required Experience

• 8+ years’ experience across Security Operations, SIEM or Security Architecture.
• Deep expertise in Splunk Enterprise and Splunk Enterprise Security.
• Strong knowledge of SIEM architecture, log management and threat detection.
• Proven experience delivering SIEM transformation or migration programmes.
• Hands-on Splunk administration and configuration experience.
• Strong understanding of cybersecurity frameworks and SOC operations.
• Excellent stakeholder management and presentation skills.
• Splunk Architect or Splunk Enterprise Security certification.
• Experience with Microsoft Sentinel, IBM QRadar, Google SecOps, Elastic, Securonix or Trend Micro.
• Previous experience within telecommunications or another large enterprise environment.