Senior Splunk SIEM Consultant - Managed Services

FNRCO; Jeddah; In loco; SAR 180.000 - 240.000; Tempo pieno

Descrizione del lavoro

FNRCO is seeking a skilled Managed Services Consultant with hands-on Splunk expertise to administer Splunk Enterprise, ES, and UBA. You will onboard log sources, develop security use cases, and manage SIEM tickets to ensure continuous log ingestion and compliance.

The role requires 5+ years of Splunk/SIEM experience, strong administration skills, and familiarity with threat feeds and regulatory audits in Saudi Arabia.

Competenze

• Minimum 5 years of Splunk/SIEM experience.
• Hands-on Splunk Enterprise administration expertise.
• Experience with Splunk ES and UBA.
• Knowledge of log onboarding, parsing, SPL, and correlation searches.
• Familiarity with security compliance requirements.

Mansioni

• Administer Splunk Enterprise: deployment, user management, licensing, upgrades, patches, configuration, change management, reporting, backup, recovery.
• Onboard, monitor, and troubleshoot log sources to ensure continuous log ingestion.
• Develop and maintain security use cases, correlation rules, dashboards, alerts, reports, and SPL queries using Splunk ES.
• Review existing Splunk configurations and recommend enhancements.
• Manage SIEM support tickets and resolve log-source ingestion issues.
• Develop custom parsing rules for non-standard logs.
• Configure threat feeds, IoCs, Sigma rules, and security advisories.
• Support regulatory audits in Saudi Arabia and provide evidence from the SIEM solution.
• Administer Splunk UBA: CIM data, raw events, and HR data ingestion; monitor UBA health.
• Monitor UBA health using the UBA Monitoring App and manage backups/failover procedures.

Conoscenze

Splunk Enterprise

Splunk Enterprise Security

Splunk UBA

SIEM development

SPL queries

Threat intelligence

Descrizione del lavoro

FNRCO is seeking a skilled Managed Services Consultant with hands-on Splunk expertise to administer Splunk Enterprise, ES, and UBA. You will onboard log sources, develop security use cases, and manage SIEM tickets to ensure continuous log ingestion and compliance.

The role requires 5+ years of Splunk/SIEM experience, strong administration skills, and familiarity with threat feeds and regulatory audits in Saudi Arabia.