Splunk Engineer - SIEM & Security Monitoring Expert

exequt MENA; Riyadh; On-site; SAR 180,000 - 260,000; Full time

Benefits offered by this job

Performance-based compensation

Bupa medical insurance (Golden Tier)

Ongoing training and mentorship

Exposure to high-impact projects with顶

Collaborative, growth-oriented culture

Job summary

ExeQut is seeking a hands-on Splunk Administrator/Engineer to design, deploy, and optimize Splunk environments for security monitoring, log management, SIEM, and operational intelligence. The role collaborates with SOC, cybersecurity, and infrastructure teams in Saudi Arabia.

You will install, configure, upgrade, and maintain Splunk components, manage distributed deployments, and support ES with detections and dashboards. Experience with Linux/Unix is essential, and Saudi nationality is required.

Qualifications

• Bachelor's degree or equivalent experience.
• Strong hands-on experience administering Splunk Enterprise and Splunk ES.
• Solid understanding of SIEM, log management, and security monitoring.
• Experience with Linux/Unix systems.
• Saudi Nationality required.

Responsibilities

• Install, configure, upgrade, and maintain Splunk Enterprise and its components (Search Heads, Indexers, Forwarders, Deployment Servers)
• Manage distributed/clustered environments, indexes, sourcetypes, retention, and RBAC
• Monitor platform health, performance, and availability; troubleshoot indexing and search issues
• Onboard logs from security and IT sources; manage forwarders, data inputs, and field extractions on Linux/Unix
• Support Splunk Enterprise Security (ES): correlation searches, detections, alerts, notable events, and dashboards
• Support SOC teams with searches and investigations

Skills

Splunk Administration

Splunk ES

SIEM

Log management

Linux/Unix

RBAC

Education

Bachelor's degree or equivalent

Tools

Splunk Enterprise

Splunk ES

Job description

ExeQut is seeking a hands-on Splunk Administrator/Engineer to design, deploy, and optimize Splunk environments for security monitoring, log management, SIEM, and operational intelligence. The role collaborates with SOC, cybersecurity, and infrastructure teams in Saudi Arabia.

You will install, configure, upgrade, and maintain Splunk components, manage distributed deployments, and support ES with detections and dashboards. Experience with Linux/Unix is essential, and Saudi nationality is required.