Lead Information Security Consultant

SoftwareOne; Fatih; Hybrid; TRY 600,000 - 900,000; Full time

Benefits offered by this job

Enterprise-level projects

International environment

Learning opportunities

Career development

Job summary

SoftwareOne in Istanbul offers a hybrid work model and seeks a Lead Information Security Consultant to design, implement, and optimize Splunk-based solutions for enterprise customers within the Security Services team.

You will support deployments, address technical and business requirements, and collaborate with customers and internal teams to ensure performance, security use cases, and smooth handovers.

Qualifications

• Proven experience as Splunk Architect/Consultant or Senior Splunk Engineer.
• Deep knowledge of Splunk Enterprise architecture: indexers, search heads, deployment servers, heavy forwarders, UF.
• Hands-on experience with Splunk Enterprise Security and security use case development.
• Solid SPL knowledge and experience creating dashboards, alerts, reports, and correlation searches.
• Experience with data onboarding from servers, networks, security devices, and cloud.
• Understanding of SIEM concepts, log management, threat detection, and security operations.

Responsibilities

• Design and implement scalable Splunk architectures based on customer requirements.
• Lead Splunk deployment, configuration, optimization, and upgrade activities.
• Support Splunk Enterprise, Splunk Cloud, Splunk Enterprise Security, and related components.
• Manage data onboarding, CIM mapping and source type configuration.
• Develop and optimize SPL searches, dashboards, alerts, reports, and correlation rules.
• Provide technical guidance to customers and internal teams; troubleshoot performance issues.
• Translate requirements into technical Splunk solutions and prepare documentation and handover materials.
• Collaborate with customers, internal teams, project managers, and pre-sales teams.

Skills

Splunk Architect

Splunk Consultant

Senior Splunk Engineer

SPL knowledge

Tools

Splunk Enterprise

Splunk Cloud

Splunk Enterprise Security

SPL

Job description

• Are you looking to design and deliver enterprise-level solutions?
• Do you enjoy collaborating with customers, internal teams, and project stakeholders to implement and optimize Splunk solutions?
• Want to be part of a leading global software and cloud solutions provider, helping organizations run and optimize their IT environments?

Practical Information

Location: Istanbul, Turkey | Reports to: CTO | Work Arrangement: Hybrid | Visa Requirements: Valid working visa for Tu rkey | Language Requirements: Good command of English , written and spoken

As our new Lead Information Security Consultant you will design, implement, and optimize Splunk-based solutions for e nterpris e customers within the Security Services team. You will support deployments, address technical and business requirements, and contribute to ongoing projects by ensuring performance, enabling security use cases, and collaborating with customers and internal teams.

Key Responsibilities

• Design and implement scalable Splunk architectures based on customer requirements
• Lead Splunk deployment, configuration, optimization, and upgrade activities
• Support Splunk Enterprise, Splunk Cloud, Splunk Enterprise Security, and related components
• Manage data onboarding, parsing, field extraction, CIM mapping, and source type configuration
• Develop and optimize SPL searches, dashboards, alerts, reports, and correlation rules
• Provide technical guidance to customers and internal delivery teams, and troubleshoot performance, indexing, search, storage, and integration issues
• Translate business and security requirements into technical Splunk solutions, and prepare technical documentation, solution designs, and operational handover materials
• Work closely with customers, internal teams, project managers, and pre-sales teams

Job Requirements

• Proven experience as a Splunk Architect, Splunk Consultant, or Senior Splunk Engineer
• Deep knowledge of Splunk Enterprise architecture including indexers, search heads, deployment servers, heavy forwarders, and universal forwarders
• Hands-on experience with Splunk Enterprise Security and security use case development
• S olid SPL knowledge and experience creating dashboards, alerts, reports, and correlation searches
• Experience with data onboarding from servers, network devices, firewalls, endpoint tools, cloud platforms, and security solutions
• Understanding of SIEM concepts, log management, threat detection, and security operations
• Strong documentation, communication skills, and ability to work directly with customers
• Splunk certifications and experience with related solutions such as Splunk SOAR, ITSI, or Observability are an advantage

What’s on offer

• Opportunity to work on enterprise-level security and Splunk projects
• A dynamic and international working environment
• Continuous learning and certification opportunities
• Collaboration with experienced security, cloud, and infrastructure professionals
• Career development within a growing security services organization

Company description

SoftwareOne is a global provider of software and cloud solutions. With a presence in over 70 countries and more than 12,000 professionals, we help organizations optimize software investments, modernize applications, and unlock the value of cloud, data, and AI.
Our people are at the core of everything we do. We enable collaboration across borders, continuous learning, and opportunities to grow in a fast-evolving technology landscape. Whether your focus is on technology, customer success, or business operations, your ideas matter, and your contributions make a difference.
Join a global team where you can build your skills, work with leading technologies, and make a real impact for our customers.