Operational Security Engineer – RUN SPLUNK Expert – Level 3

Demartino Law; Paris; Hybride; EUR 70 000 - 110 000; Plein temps

Résumé du poste

Demartino Law seeks an experienced Operational Security Engineer with RUN Splunk expertise to join the team in Europe. The role focuses on keeping the Splunk platform highly available and secure, handling incidents, and improving monitoring and data ingestion reliability.

The ideal candidate has confirmed Splunk admin and ITISI skills, plus deep knowledge of forwarders, inputs, index configuration, and clustering. This position emphasizes technical mastery and proactive problem solving.

Qualifications

• Experience with Splunk Forwarders (Universal/Heavy) and input configurations (TCP/UDP/files/scripts).
• Expertise in index optimization and configuring indexes.conf and transforms.conf for fast searches and alerts.
• Solid understanding of RBAC security best practices and clustering/load balancing for scalable infra.

Responsabilités

• Handle platform incidents and ensure high availability of Splunk environment.
• Document processes and recurring incidents for runbooks and knowledge base.
• Improve monitoring and alerting to detect issues early and reduce MTTR.
• Ensure reliable and efficient data ingestion from forwarders and inputs.
• Maintain Splunk security posture and automate routine maintenance tasks.

Connaissances

Splunk administration

Splunk ITISI

Incident handling

Monitoring optimization

Outils

Splunk

Description du poste

# Operational Security Engineer – RUN SPLUNK Expert – Level 3* Operational Security Engineer – RUN SPLUNK Expert – Level 3CONTEXT Overall objective: Participate in Splunk RUN activities Key project constraint: Splunk RUN We are looking for a highly skilled Splunk expert to strengthen the RUN team. They must have a Splunk Admin++ level of expertise.RESPONSIBILITIES: – Handle platform incidents and ensure high platform availability – Document processes and recurring incidents – Improve monitoring. The candidate must have a thorough understanding of Universal Forwarders, Heavy Forwarders, and input configuration (e.g., TCP, UDP, files, scripts) to guarantee reliable and efficient data ingestion. They must be proficient in index optimization, configuring indexes.conf and transforms.conf files, and using knowledge objects to ensure fast searches and effective alerts. Finally, a solid understanding of Splunk security best practices (RBAC) and load balancing mechanisms (clustering) is essential for infrastructure maintenance and scalability.Technical skills: Splunk admin – Confirmed – Essential; Splunk ITISI – Confirmed – EssentialProfessional English Language Skills (Essential) **Work location:** Europe