Splunk SIEM Architect — Hybrid Role with Global Impact

Avaloq; Metro Manila; Hybrid; PHP 1,500,000 - 2,100,000; Full time

Benefits offered by this job

Hybrid and flexible working

Inclusive culture

Job summary

Avaloq, a Swiss-based wealth management technology provider, is expanding its global footprint and seeks a Splunk Architect/Consultant to design and manage Splunk infrastructure. Hybrid and flexible work arrangements are offered to balance life and work across our Avaloq culture.

The role involves building and optimizing Splunk deployments, integrating data sources, and supporting SecOps with a focus on CIM mappings, security analytics, and incident response.

Qualifications

• Experience as Splunk Architect or higher.
• At least 5 years of general work experience as Splunk Architect or higher.
• Design and implement Security Operation Center with Splunk.

Responsibilities

• Design, implement, and manage the Splunk infrastructure.
• Deploy and manage Splunk indexer clusters and search head clusters.
• Monitor operations of Splunk platform and optimize deployments.
• Integrate Splunk with diverse data sources and cloud facilities.
• Build Splunk Technology Add-ons and custom scripts (Python, Bash, PowerShell, VBScript).
• Create Splunk apps for Forwarders and REST API integration.
• Onboard data sources, map CIM, and establish health KPIs.
• Manage Splunk knowledge objects and RBAC.
• Design correlation searches in Splunk Enterprise Security.
• Onboard Threat Intelligence feeds and relate to data.
• Support SecOps and drive operational model transformation.

Skills

Splunk architecture

SPL

Regular expressions

Security operations

Cloud knowledge

Troubleshooting

Communication skills

Team player

Tools

Splunk

Kubernetes

Terraform

Git

REST API

SQL

PowerShell

Python

Bash

Windows

Linux

VBScript

OCI

WAF

SOAR

Job description

Avaloq, a Swiss-based wealth management technology provider, is expanding its global footprint and seeks a Splunk Architect/Consultant to design and manage Splunk infrastructure. Hybrid and flexible work arrangements are offered to balance life and work across our Avaloq culture.

The role involves building and optimizing Splunk deployments, integrating data sources, and supporting SecOps with a focus on CIM mappings, security analytics, and incident response.