Senior Splunk SIEM Architect & SecOps Lead

Avaloq; Philippines; Hybrid; PHP 1,200,000 - 2,400,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Avaloq is hiring a Senior Splunk Architect/Consultant to design, implement and optimize our Splunk platform across on-prem and cloud integration. You will manage indexers, search heads, CIM mappings, and security correlations within a cross-functional SecOps team.

You will lead data onboarding, create dashboards, and build Apps/Add-ons while collaborating with cloud and infrastructure teams in a hybrid work environment.

Qualifications

• Minimum 5 years as Splunk Architect or higher.
• Experience designing security operations with Splunk clusters.
• Solid SPL, regex, and data pipelines knowledge.
• Proficiency with deployment tools and version control (Git, Terraform).
• Knowledge of security tech (Firewall, WAF, vulnerability scanners).
• Familiarity with cloud providers, preferably OCI.
• Experience with Splunk Enterprise Security and CIM mapping.

Responsibilities

• Design, implement, and manage Splunk infrastructure and clusters.
• Onboard data sources, create CIM mappings and dashboards.
• Develop Splunk Apps/Add-ons and REST API integrations.
• Collaborate with SecOps to optimize operations and incident response.
• Onboard Threat Intelligence feeds and correlate with data.
• Mentor teams and drive continuous improvement.

Skills

Splunk Architecture

SPL

Linux admin

Windows admin

Kubernetes

REST API

Python

Git

Terraform

OCI Cloud

SOAR

Education

Splunk Architect certification

Tools

Splunk

Git

Terraform

Kubernetes

OCI

Job description

Avaloq is hiring a Senior Splunk Architect/Consultant to design, implement and optimize our Splunk platform across on-prem and cloud integration. You will manage indexers, search heads, CIM mappings, and security correlations within a cross-functional SecOps team.

You will lead data onboarding, create dashboards, and build Apps/Add-ons while collaborating with cloud and infrastructure teams in a hybrid work environment.