We are seeking a highly skilled and motivated individual to lead our SIEM engineering team. The Lead SIEM Engineer will be responsible for overseeing all technical aspects of our SIEM infrastructure, including design, implementation, optimization, and maintenance. This role requires deep technical expertise in SIEM as well as strong leadership and communication skills.
Responsibilities:
Team Leadership
Lead and mentor a team of SIEM/Splunk engineers, providing guidance, support, and feedback.
Foster a culture of collaboration, innovation, and continuous improvement within the team.
Set clear goals and expectations for team members and ensure they are met.
Splunk Infrastructure Design and Implementation
Design, deploy, and maintain scalable and reliable Splunk infrastructure to meet business needs.
Develop best practices and standards for Splunk configuration, deployment, and usage.
Collaborate with other teams to integrate Splunk with existing systems and tools.
Performance Optimization and Monitoring
Optimize Splunk performance and efficiency through tuning, capacity planning, and resource optimization.
Implement and maintain monitoring solutions to ensure the health and availability of Splunk infrastructure.
Troubleshoot and resolve performance issues and system outages in a timely manner.
Security and Compliance
Implement and enforce security best practices for Splunk, including access controls, data encryption, and auditing.
Ensure compliance with relevant regulations and industry standards (e.g., GDPR, HIPAA, PCI DSS).
Documentation and Knowledge Sharing
Create and maintain comprehensive documentation for Splunk infrastructure, configurations, and processes.
Provide training and knowledge sharing sessions to empower team members and other stakeholders.
Vendor Management and Strategic Planning
Evaluate Splunk-related technologies, tools, and services from vendors and make recommendations for adoption.
Collaborate with stakeholders to develop strategic plans and roadmaps for Splunk infrastructure and capabilities.
Technical Qualifications:
Candidate must possess at least a Diploma, Advanced/Higher/Graduate Diploma, Bachelor's Degree, Post Graduate Diploma, Professional Degree, Master's Degree, Computer Science/Information Technology, Engineering (Computer/Telecommunication), Engineering (Electrical/Electronic), Engineering (Others), Science & Technology or equivalent.
Required language(s): English
Extensive experience (5-7+ years) in designing, implementing, and managing Splunk infrastructure in large-scale environments.
Deep technical expertise in Splunk architecture, deployment, and administration, including Splunk Enterprise, Splunk Cloud and SOAR.
Proficiency in Splunk search language (SPL) and building complex queries, dashboards, and reports on demand as needed by the stakeholders.
Strong scripting skills (e.g., Python, Bash,PowerShell) for automation and integration with Splunk.
Solid understanding of networking, security, and system administration concepts.
Experience with Splunk app development and customization.
