Senior Mss Engineer_Splunk
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
CyberGate Defense is seeking a Senior MSS Engineer with Splunk expertise to deploy, configure, and maintain Splunk Enterprise and Enterprise Security. The role involves log source onboarding, detection engineering, platform maintenance, and SOC support.
Key Skills for This Role
Responsibilities
- Deploy Splunk Enterprise / Distributed Architecture
- Configure Indexers, Search Heads, Forwarders
- Implement clustering (Indexer / SH Cluster)
- Configure Universal Forwarders & Heavy Forwarders for log source onboarding
- Develop SPL based detection queries and correlation searches in ES
- Implement Risk Based Alerting (RBA) and fine tune alerts
- Monitor license utilization, perform Splunk upgrades and app updates
- Create dashboards and enhance SOC visibility
Requirements
- Experience deploying Splunk Enterprise / Distributed Architecture
- Experience configuring Indexers, Search Heads, Forwarders
- Experience implementing clustering (Indexer / SH Cluster)
- Experience with log source onboarding and data inputs
- Experience developing SPL based detection queries
- Experience with Splunk Enterprise Security and correlation searches
- Experience with platform maintenance, upgrades, and performance tuning
Full Job Posting
Deployment & Architecture
- Deploy Splunk Enterprise / Distributed Architecture
- Configure Indexers, Search Heads, Forwarders
- Implement clustering (Indexer / SH Cluster)
Log Source Onboarding
- Configure Universal Forwarders & Heavy Forwarders
- Create data inputs (syslog, API, cloud integrations)
- Index creation and retention policy configuration
- Field extraction, sourcetype validation, and parsing
Detection & Use Case Engineering
- Develop SPL based detection queries
- Create correlation searches in ES (Enterprise Security)
- Implement Risk Based Alerting (RBA)
- Fine tune alerts to reduce false positives
- Conduct use case gap analysis
Log Validation & Troubleshooting
- Validate ingestion pipeline (Forwarder → Indexer → Search Head)
- Troubleshoot parsing, indexing, and timestamp issues
- Monitor ingestion delays and indexing queues
- Optimize search performance
Platform Maintenance
- Monitor license utilization (Daily indexing volume)
- Perform Splunk upgrades and app updates
- Backup configurations and validate restore
- Performance tuning and resource optimization
MSS & SOC Support
- Dashboard creation and SOC visibility enhancements
- Alert lifecycle improvements
- Support threat hunting queries
- Continuous detection improvement aligned with MITRE
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at CyberGate Defense
Red Teaming Specialist
Abu Dhabi, UAE
CyberGate Defense seeks an experienced Red Teaming Specialist to lead stealthy adversary simulations in Abu Dhabi. Requires 5+ years of offensive security experience, expertise in Cobalt Strike, AD exploitation, and cert
Saipoint Administator
Abu Dhabi, UAE
CyberGate Defense is seeking a skilled SailPoint Implementation Engineer with hands-on experience in SailPoint IdentityIQ and/or Identity Security Cloud. The role involves designing, configuring, and deploying IAM soluti
MKS / Partners & Platforms Specialist
Abu Dhabi, UAE
CyberGate Defense seeks a MKS / Partners & Platforms Specialist to manage partner relationships, product selection, sales enablement, and training coordination. The role requires 3-5 years in partnership management or kn
Bid Manager
Abu Dhabi, UAE
CyberGate Defense is hiring a Bid Management Manager to lead end-to-end bid and proposal processes for strategic opportunities. The role involves managing the bid lifecycle, developing win themes, and coordinating with s
SOAR Engineer
Abu Dhabi, UAE
CyberGate Defense seeks a SOAR Engineer to design and implement advanced SOAR playbooks for phishing, incident response, vulnerability management, and threat hunting. The role requires 5+ years of SOAR experience, hands-
Senior Pre Sales -Cyber Security
Abu Dhabi, UAE
CyberGate Defense seeks a Senior Cybersecurity Pre-Sales specialist to lead pre-sales activities, architect tailored solutions, and deliver compelling technical presentations. The ideal candidate has deep cybersecurity e
SOC L3
Abu Dhabi, UAE
CyberGate Defense seeks an experienced SOC L3 analyst to lead and mentor a team of SOC analysts, serve as escalation point for complex security incidents, and develop SOPs and incident response plans. Requires 7-9 years
DFIR Analyst
Abu Dhabi, UAE
CyberGate Defense is seeking a DFIR Analyst to lead incident response and digital forensic investigations. The role requires 3-5 years of experience in digital forensics and incident response, proficiency with forensic t
Red Teaming Specialist
Abu Dhabi, UAE
Saipoint Administator
Abu Dhabi, UAE
MKS / Partners & Platforms Specialist
Abu Dhabi, UAE
Bid Manager
Abu Dhabi, UAE
SOAR Engineer
Abu Dhabi, UAE
Senior Pre Sales -Cyber Security
Abu Dhabi, UAE
SOC L3
Abu Dhabi, UAE
DFIR Analyst
Abu Dhabi, UAE