Software Engineer

Pride Global; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

Pride Global in Singapore is seeking an experienced Splunk SIEM Engineer/SME to support a banking/financial services environment. The role requires hands-on expertise across Splunk SIEM administration, architecture, and data onboarding, with a focus on developing use cases and troubleshooting.

The successful candidate will work across architecture, engineering and infrastructure to ensure secure, reliable log ingestion, alignment with CIM mappings, and smooth migration activities during platform

Qualifications

• 7+ years of relevant experience in Splunk.
• Proven Splunk SME across admin, engineering and architecture.
• Strong experience with data onboarding, CIM mapping and use-case development.
• Experience supporting regulated banking environments is preferred.
• Excellent troubleshooting and performance tuning skills.

Responsibilities

• Develop and optimize Splunk searches, alerts and dashboards.
• Onboard security and infrastructure logs end-to-end.
• Troubleshoot complex Splunk issues and failed data sources.
• Support migration and upgrades across Windows/OS and infrastructure changes.
• Coordinate with Infrastructure, Network and Cybersecurity teams.
• Ensure forwarders and data ingestion maintain SIEM functionality after changes.

Skills

Splunk SIEM

Administration

Architecture

Data Onboarding

Use-case Development

Troubleshooting

Migration

Infra Collaboration

Job description

Experience: 7+ Years

We are looking for an experienced Splunk SIEM Engineer / SME to support a critical Banking / Financial Services environment in Singapore.

The ideal candidate will have strong hands-on expertise across Splunk SIEM administration, architecture, engineering, data onboarding, use-case development, troubleshooting and migration.

This role requires a true Splunk SME who can work beyond routine administration and operate across architecture, engineering and infrastructure, with strong understanding of how Splunk integrates with servers, network infrastructure and enterprise security technologies.

Key Focus Areas

• SIEM health monitoring, infrastructure administration and performance optimization.
• CPU, memory, storage and platform health monitoring.
• Splunk upgrades, configuration management and security advisory implementation.
• Indexer Cluster and Search Head Cluster monitoring and troubleshooting.

Data Onboarding

• End-to-end onboarding of security and infrastructure logs.
• Integration of Windows/Linux servers, network devices and security technologies including NAC, PAM, NBAD, IPS, DAM, DLP and Antivirus.
• Data parsing, field extraction and CIM mapping.
• First-level assessment, UAT and production onboarding.

SIEM Use Cases

• Develop new Splunk SIEM use cases based on security requirements.
• Develop and optimize searches, alerts and dashboards.

Advanced Troubleshooting

• Investigate and remediate complex Splunk issues.
• Troubleshoot stopped-reporting servers and data sources.
• Search scheduler, failed search, missed search and job troubleshooting.
• Search Head tuning and optimization.
• Splunk server reconciliation and platform health validation.

Splunk Migration

• Support migration of existing Splunk environments during Windows/OS upgrades and infrastructure changes.
• Understand existing Splunk architecture, configurations and dependencies.
• Perform hands-on migration configuration and validation.
• Ensure forwarders, data ingestion, searches and SIEM use cases continue to function after migration.

Infrastructure Integration

• Work closely with Infrastructure, Network, Cybersecurity and application teams.
• Troubleshoot Universal Forwarders, Heavy Forwarders, servers and network-based log forwarding.
• Support restoration / pump-back of historical logs into Splunk when required.
• Coordinate cross-functional resolution of complex log-flow and infrastructure issues.

Key Requirements

• 7+ years of relevant experience with strong Splunk expertise.
• Proven Splunk SME-level experience across administration, engineering and architecture.
• Strong hands-on experience with Splunk SIEM, Indexers, Search Heads, Indexer Clusters and Search Head Clusters.
• Strong experience in data onboarding, parsing and CIM mapping.
• Experience developing and fine-tuning SIEM use cases.
• Strong troubleshooting and performance-tuning experience.
• Experience with Splunk migration and Windows/OS upgrade-related migration activities.
• Strong understanding of Universal Forwarders / Heavy Forwarders and log-flow architecture.
• Experience working with Infrastructure and Network teams.
• Banking / Financial Services or other highly regulated enterprise environment experience is strongly preferred.
• Strong analytical, troubleshooting and stakeholder-management skills.