SIEM / Security Architect

Next Ventures; Stockholms kommun; On-site; SEK 1,100,000 - 1,700,000; Full time

Job summary

Next Ventures in Sweden is seeking an experienced Splunk specialist to lead complex SIEM transformation and security architecture initiatives within a large enterprise environment. You will assess the existing SIEM setup, design scalable Splunk Enterprise and Splunk ES architectures, and coordinate data onboarding, alerts and dashboards with security, architecture and operations teams.

The role demands 8+ years in security operations or SIEM, hands-on Splunk administration, and strong

Qualifications

• 8+ years’ experience across Security Operations, SIEM or Security Architecture.
• Deep expertise in Splunk Enterprise and Splunk Enterprise Security.
• Strong knowledge of SIEM architecture, log management and threat detection.
• Proven experience delivering SIEM transformation or migration programmes.
• Hands-on Splunk administration and configuration experience.
• Strong understanding of cybersecurity frameworks and SOC operations.
• Excellent stakeholder management and presentation skills.

Responsibilities

• Assess the existing SIEM environment and recommend strategic improvements.
• Design and deliver Splunk transformation or migration programmes.
• Develop scalable Splunk Enterprise and Splunk Enterprise Security architectures.
• Manage data onboarding, correlation searches, alerts and dashboards.
• Improve security monitoring, threat detection and SOC capabilities.
• Translate technical findings into clear recommendations for senior stakeholders.
• Work closely with security, architecture and operational teams.

Skills

Splunk Enterprise

Splunk Enterprise Security

SIEM

Security Operations

Threat detection

SOC operations

Stakeholder management

Security architecture

Data onboarding

Education

Splunk Architect certification

Tools

Microsoft Sentinel

IBM QRadar

Google SecOps

Elastic

Securonix

Trend Micro

Job description

We are supporting a leading global technology and consulting organisation seeking an experienced Splunk specialist to lead complex SIEM transformation and security architecture initiatives within a large enterprise environment.

Key Responsibilities

• Assess the existing SIEM environment and recommend strategic improvements.
• Design and deliver Splunk transformation or migration programmes.
• Develop scalable Splunk Enterprise and Splunk Enterprise Security architectures.
• Manage data onboarding, correlation searches, alerts and dashboards.
• Improve security monitoring, threat detection and SOC capabilities.
• Translate technical findings into clear recommendations for senior stakeholders.
• Work closely with security, architecture and operational teams.

Required Experience

• 8+ years’ experience across Security Operations, SIEM or Security Architecture.
• Deep expertise in Splunk Enterprise and Splunk Enterprise Security.
• Strong knowledge of SIEM architecture, log management and threat detection.
• Proven experience delivering SIEM transformation or migration programmes.
• Hands-on Splunk administration and configuration experience.
• Strong understanding of cybersecurity frameworks and SOC operations.
• Excellent stakeholder management and presentation skills.
• Splunk Architect or Splunk Enterprise Security certification.
• Experience with Microsoft Sentinel, IBM QRadar, Google SecOps, Elastic, Securonix or Trend Micro.
• Previous experience within telecommunications or another large enterprise environment.