Splunk Architect

GeekSoft Consulting; Stockholms kommun; On-site; SEK 900,000 - 1,200,000; Full time

Job summary

GeekSoft Consulting in Stockholm seeks an experienced security operations professional with 8+ years in SIEM, security architecture, and SOC leadership for a fixed-term assignment. You will design, implement and optimize Splunk Enterprise and Splunk Enterprise Security, driving SIEM transformations and collaborating with IT and business stakeholders.

Strong knowledge of cybersecurity frameworks, data onboarding, and incident monitoring is required, with hands-on experience across multiple SIEM

Qualifications

• 8+ years of experience in Security Operations, SIEM, or Security Architecture.
• Deep expertise in Splunk and Splunk Enterprise Security.
• Experience with SIEM transformation, monitoring, and SOC operations.
• Hands-on Splunk data onboarding, correlation searches, alerts, dashboards, and administration.
• Knowledge of cybersecurity frameworks and security policies.
• Leading or contributing to SIEM transformation, migration, and modernization programmes.
• Experience with other SIEM platforms such as Microsoft Sentinel, IBM QRadar, Google SecOps, Elastic, Securonix, or Trend AI.

Responsibilities

• Help design, build and continuously improve the clients online platform.
• Research, suggest and implement new technology solutions following best practices/standards.
• Take responsibility for the resiliency and availability of different products.
• Be a productive member of the team.

Skills

Splunk SIEM

Security Operations

SOC operations

Security architecture

Threat detection

Stakeholder management

Presentation skills

Security monitoring

Tools

Splunk Enterprise

Splunk Enterprise Security

Microsoft Sentinel

IBM QRadar

Job description

Fixed Term Employment | GeekSoft Consulting | Sweden

Posted On 09.09.2026

Job Information

Technology

Work Experience 8+ years

State/Province Stockholm County

City Stockholm

100 26

Job Description

• Help design, build and continuously improve the clients online platform.
  
• Research, suggest and implement new technology solutions following best practices/standards.
  
• Take responsibility for the resiliency and availability of different products.
  
• Be a productive member of the team.
  

Requirements

• 8+ years of experience in Security Operations, SIEM, or Security Architecture.
  
• Experienced Splunk SIEM / Security Architect with 8+ years of experience across Security Operations, SIEM, and Security Architecture. Deep expertise in Splunk
  
• Enterprise and Splunk Enterprise Security, along with strong experience in SIEM transformation, security monitoring, and SOC operations.
  
• Design, implement, and optimize Splunk Enterprise and Splunk Enterprise Security solutions.
  
• Define and manage SIEM architecture, log management, security monitoring, and threat detection capabilities.
  
• Lead or contribute to SIEM transformation, migration, and modernization programmes.
  
• Perform hands‑on activities including data onboarding, correlation searches, alerting, dashboards, and Splunk administration.
  
• Conduct technical assessments and translate findings into actionable strategic recommendations.
  
• Support SOC operations and ensure alignment with cybersecurity frameworks, security policies, and best practices.
  
• Collaborate with security, infrastructure, application, and business stakeholders to drive SIEM improvements.
  
• Present technical findings, recommendations, and solution strategies to senior stakeholders.
  
• Strong hands‑on expertise with Splunk Enterprise and Splunk Enterprise Security.
  
• Excellent understanding of SIEM architecture, log management, security monitoring, and threat detection.
  
• Experience with SIEM transformation and migration projects.
  
• Hands‑on experience with Splunk data onboarding, correlation searches, alerts, dashboards, and administration.
  
• Strong knowledge of SOC operations and cybersecurity frameworks.
  
• Strong analytical, communication, stakeholder management, and presentation skills.
  
• Splunk Architect or Splunk Enterprise Security certification.
  
• Experience with other SIEM platforms such as Microsoft Sentinel, IBM QRadar, Google SecOps, Elastic, Securonix, or Trend AI.
  
• Experience working in telecom or large enterprise environments.
  
• Proven ability to assess complex security environments and provide strategic recommendations.
  

Security Clearance Requirement

• This position requires security clearance.
  
• Candidates must have been residing in Sweden for a minimum of 2–3 years to meet the applicable security clearance requirements.
  
• A challenging, innovating environment.
  
• Opportunities for learning where needed.