Senior Splunk SIEM Data Onboarding Engineer

Huxley; Town of Belgium (WI); On-site; USD 120,000 - 160,000; Full time

Job summary

Huxley is seeking an experienced SIEM Data Onboarding Engineer to join a large-scale cybersecurity environment. You will lead Splunk onboarding, design scalable ingestion pipelines, and ensure high-quality log ingestion across Windows, Linux, and cloud sources.

Candidates should be proficient in SPL, CIM, and Cribl, with strong scripting skills (Python/PowerShell) and English fluency. The role collaborates with security operations and tuning of data flows for cost efficiency.

Qualifications

• Experience onboarding complex log sources into Splunk.
• Strong knowledge of Splunk CIM and data inputs.
• Experience with Windows and Linux logs and cloud logs (Azure/AWS/GCP).
• Proficient in Python, PowerShell, or similar scripting for automation.
• Fluent English required; French desirable.

Responsibilities

• Lead onboarding of new log and telemetry sources into Splunk.
• Gather technical requirements from stakeholders and source system owners.
• Design and implement scalable ingestion pipelines.
• Configure and validate data collection mechanisms.
• Troubleshoot ingestion, parsing, and normalization issues.
• Map log sources to the Splunk CIM.
• Collaborate with security operations and detection engineering teams.
• Perform data quality assessments and resolve data integrity issues.
• Optimise data flows for scalability, performance, and cost efficiency.
• Support onboarding of cloud, infrastructure, application, network, and security data sources.
• Create and maintain onboarding documentation and procedures.
• Contribute to SIEM onboarding standards and continuous improvement initiatives.

Skills

Splunk Enterprise

Splunk Cloud

SPL

CIM

Forwarders

Data ingestion

Troubleshooting

Security monitoring

Tools

Cribl Stream

Job description

Huxley is seeking an experienced SIEM Data Onboarding Engineer to join a large-scale cybersecurity environment. You will lead Splunk onboarding, design scalable ingestion pipelines, and ensure high-quality log ingestion across Windows, Linux, and cloud sources.

Candidates should be proficient in SPL, CIM, and Cribl, with strong scripting skills (Python/PowerShell) and English fluency. The role collaborates with security operations and tuning of data flows for cost efficiency.