Splunk SecOps Architect - Hybrid & Impactful SIEM Leader

Avaloq Group; Philippines; Hybrid; PHP 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Hybrid work

Inclusive culture

Job summary

Avaloq is seeking a Splunk Architect to design, implement, and manage its Splunk infrastructure in a hybrid work environment. The role focuses on deploying indexer and search head clusters, optimizing deployments, and ensuring proactive monitoring and issue resolution.

You will onboard diverse data sources, build CIM mappings, and collaborate with security analysts to strengthen the Splunk environment and SecOps capabilities.

Qualifications

• Splunk Architect certification or equivalent experience.
• 5+ years in Splunk architecture or higher as a lead.
• Experience designing and operating SOC with Splunk.
• Knowledge of Splunk components: search head, indexer, deployment server.
• Familiarity with REST, data pipelines, and CIM mapping.

Responsibilities

• Design, implement, and manage Splunk infrastructure.
• Deploy and manage indexer and search head clusters.
• Optimize existing Splunk deployments and monitor operations.
• Onboard data sources, create CIM mappings and data models.

Skills

Splunk architecture

SOC design

OCI cloud

Linux admin

Kubernetes

REST API

Python scripting

Team collaboration

Tools

Git

Terraform

Splunk Apps

CI/CD tools

Job description

Avaloq is seeking a Splunk Architect to design, implement, and manage its Splunk infrastructure in a hybrid work environment. The role focuses on deploying indexer and search head clusters, optimizing deployments, and ensuring proactive monitoring and issue resolution.

You will onboard diverse data sources, build CIM mappings, and collaborate with security analysts to strengthen the Splunk environment and SecOps capabilities.