Senior SIEM Engineer - Splunk

Company Description

Founded and headquartered in Switzerland, Avaloq is expanding globally with around 2,500 colleagues across 12 countries and serving more than 170 clients in 35 countries. We are a leading provider of wealth management technology and services for financial institutions worldwide, including private banks, wealth managers, investment managers, retail, and neo banks. Our research-led approach and continual innovation are driven by the passion and creativity of our colleagues.

We are always looking for talented individuals to join us in our mission to orchestrate the financial ecosystem and democratize access to wealth management. Avaloq offers opportunities to work closely with some of the world's leading financial institutions, shaping careers through collaboration. We foster a supportive, flexible, and collaborative work environment that empowers our colleagues to reach their full potential.

Job Description

We are seeking a highly skilled and experienced Splunk Architect with a strong security background. The successful candidate will be responsible for designing, implementing, and managing our Splunk infrastructure in a hybrid cloud, large-scale environment. This position is primarily based at our Bioggio, Ticino office.

Your key tasks

1. Design, implement, and manage the Splunk infrastructure.
2. Deploy and manage Splunk indexer clusters and search head clusters.
3. Optimize existing clustered Splunk deployments.
4. Monitor operations of the Splunk platform to enable proactive issue identification, response, and resolution.
5. Integrate Splunk with legacy data sources, commercial security tools, and Cloud Service providers.

• Build Splunk Technology Add-ons.
• Create custom scripts in Python, Bash, PowerShell, VBscripts.
• Develop Splunk apps for deployment on thousands of Universal Forwarders.
• Interact with REST API endpoints.
• Work with RDBMS in SQL.

Qualifications

1. Splunk Architect or Consultant certification or proven Professional Services experience.
2. Minimum 5 years of experience as a Splunk Architect or higher.
3. Experience in designing and implementing Security Operations Centers with Splunk.
4. Strong understanding of Splunk architecture components.
5. Proficiency in SPL, regular expressions, and data pipelines.
6. Knowledge of deployment and version control tools like Git, Terraform.
7. Knowledge of security components and cloud providers, preferably OCI.
8. Knowledge of SOAR is highly desirable.
9. Linux (preferably RHEL) and Windows system administration skills.
10. Knowledge of Kubernetes and containerized architectures.
11. Understanding of network protocols and infrastructure.
12. Ability to troubleshoot independently.
13. Excellent communication skills.

Additional Information

We support work-life balance through hybrid and flexible working arrangements. Avaloq values diversity and fosters an inclusive environment where everyone can be their authentic selves. We do not accept speculative CV submissions from recruitment agencies.