Senior Splunk Operations Lead - SIEM & Security Analytics

Visible Stars; Riyadh; On-site; SAR 360,000 - 540,000; Full time

Job summary

Visible Stars in Riyadh is seeking a senior Splunk Architect to lead enterprise deployments and operations. You will oversee data source onboarding, CIM compliance, and threat-detection rule development, working with security teams and business units to ensure robust SIEM coverage.

The role requires 7–10 years of Splunk experience, expertise in RBAC, and strong knowledge of regulatory frameworks. This position is based in Riyadh with a focus on high-availability security monitoring.

Qualifications

• 7–10 years of experience in Splunk deployments.
• Expertise in Splunk Enterprise architecture and operations.
• Knowledge of regulatory frameworks (SAMA CSF, NCA ECC/CCC, PCI DSS).
• Experience with RBAC and security monitoring use cases.

Responsibilities

• Lead daily Splunk operations and ensure SLA adherence.
• Perform infrastructure management and health checks.
• Oversee scaling advisement and expansion readiness.
• Create and maintain dashboards, alerts, and reports.
• Onboard new data sources with CIM compliance.
• Develop detection rules and correlation searches.
• Coordinate with bank's internal teams for incident response.
• Ensure regulatory reporting and regulatory documentation.

Skills

Security monitoring

Incident response

Dashboard development

Threat intelligence

Regulatory mapping

Education

Splunk Enterprise Certified Architect

Tools

Splunk

Job description

Visible Stars in Riyadh is seeking a senior Splunk Architect to lead enterprise deployments and operations. You will oversee data source onboarding, CIM compliance, and threat-detection rule development, working with security teams and business units to ensure robust SIEM coverage.

The role requires 7–10 years of Splunk experience, expertise in RBAC, and strong knowledge of regulatory frameworks. This position is based in Riyadh with a focus on high-availability security monitoring.