Splunk Security Infrastructure Engineer for Qatar
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
Adheya Technologies seeks a Splunk Security Infrastructure Engineer for a Qatar-based role. The role involves platform administration, data onboarding, detection content development, SOAR automation, and access control.
Key Skills for This Role
Responsibilities
- Install, configure, and maintain Splunk Enterprise/Cloud deployments including indexers, search heads, forwarders, and cluster managers
- Manage data ingestion pipelines from diverse sources and normalize log data to Splunk CIM
- Author and tune correlation searches and alerts using SPL to detect threats aligned to MITRE ATT&CK
- Design and implement automated playbooks using Splunk SOAR for incident response
- Administer RBAC, authentication integrations, and data access controls within Splunk
Requirements
- Experience in Splunk platform administration, including installation, configuration, and maintenance of Splunk Enterprise/Cloud
- Expertise in data onboarding and normalization using Universal Forwarders, Heavy Forwarders, and custom TAs
- Proficiency in SPL for developing correlation searches, alerts, dashboards, and reports
- Experience with Splunk Enterprise Security and SOAR for detection and automation
- Knowledge of RBAC, authentication integrations (LDAP, SAML, MFA), and data access controls
- Familiarity with cloud platforms (AWS, Azure, GCP) and security principles
- Experience with MITRE ATT&CK framework and threat detection
Full Job Posting
Overview
- We are looking for Splunk Security Infrastructure Engineer for Qatar location.
Platform Administration & Operations
- Install, configure, and maintain Splunk Enterprise / Splunk Cloud deployments, including indexers, search heads, forwarders, and cluster managers.
- Manage Splunk licensing, capacity planning, and storage tiering to align with data retention policies.
- Perform routine health checks, patching, and version upgrades to maintain system stability and security.
- Configure and administer Splunk clustering (Search Head Clusters, Indexer Clusters) to ensure high availability and disaster recovery.
- Monitor platform performance metrics such as indexing throughput, search concurrency, and disk utilization, and implement tuning measures proactively.
Data Onboarding & Normalization
- Architect and manage data ingestion pipelines from diverse sources including firewalls, endpoints, cloud platforms (AWS, Azure, GCP), Active Directory, and SaaS applications.
- Deploy and manage Universal Forwarders and Heavy Forwarders across on premise and cloud environments.
- Develop and maintain custom Technology Add ons (TAs) and props/transforms to normalize log data to the Splunk Common Information Model (CIM).
- Validate data quality and completeness — monitoring for indexing gaps, latency, and data drops.
- Integrate Splunk with REST APIs and syslog receivers to ingest telemetry from non standard sources.
Detection Content & Search Development
- Author, tune, and maintain correlation searches and scheduled alerts using Splunk Processing Language (SPL) to detect threats aligned to MITRE ATT&CK.
- Build and maintain Splunk Enterprise Security (ES) Notable Events, risk scores, and threat object frameworks.
- Develop and manage dashboards, reports, and visualizations for SOC analysts, management, and executive stakeholders.
- Collaborate with the threat intelligence team to integrate IOC feeds and threat lists into detection logic.
SOAR & Automation Engineering
- Design and implement automated playbooks using Splunk SOAR (formerly Phantom) to orchestrate incident response workflows.
- Build and maintain API connectors between Splunk SOAR and third party tools such as EDR platforms, ticketing systems, firewalls, and IAM solutions.
- Automate repetitive analyst tasks including alert triage, artifact enrichment, evidence collection, and containment actions.
- Configure Splunk SOAR case management — custom fields, workbooks, SLA tracking, and analyst assignment rules.
Access Control & Security Management
- Administer Role Based Access Control (RBAC) within Splunk, ensuring analysts, engineers, and leadership have appropriate data access and capability levels.
- Manage Splunk authentication integrations including LDAP, SAML, and multi factor authentication (MFA).
- Enforce data segmentation and index level access controls to protect sensitive and regulated data sets.
Compensation
- Pay: QAR10,000.00 QAR14,000.00 per month
Work Location
- Work Location: In person
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Adheya technologies
Detection Engineering Consultant (Cyber Security) for Qatar
Doha, QAT
A Qatar-based role for a Detection Engineering Consultant with 7+ years in cybersecurity and 4+ years in detection engineering, SIEM engineering, or senior SOC analyst roles. The consultant will focus on detection engine
IT Support Consultant for Qatar
Doha, QAT
Adheya Technologies seeks an IT Support Consultant for a Qatar-based role. The ideal candidate will have strong problem-solving skills, customer service orientation, and hands-on experience with Microsoft systems, Active
IT Business Analyst (.Net) for Qatar location.
Doha, QAT
Adheya technologies is seeking an IT Business Analyst for a Qatar location. The role requires plant-related IT systems experience, Microsoft .NET development (C#, ASP.NET), and database experience with SQL Server or Orac
IT service management Consultant (ITIL) for Qatar
Doha, QAT
Adheya technologies seeks an IT Service Management Consultant (ITIL) for a Qatar location. The role involves overseeing daily IT service operations, managing incidents and changes, and ensuring SLA compliance. Requires 8
Network Support – L2/L3 for Qatar
Doha, QAT
Adheya technologies seeks a Network Support Engineer L2/L3 for Qatar to support, maintain, and optimize enterprise network and security infrastructure. Requires 6-10+ years experience and expertise in routing, switching,
L2/L3 IT Support Engineer for Qatar
Doha, QAT
Adheya technologies is hiring an Enterprise Services Support Engineer (L2/L3) for a Qatar location. The role involves maintaining, supporting, and optimizing enterprise services platforms with 6-10+ years of experience i
Oracle Fusion Consultant for Qatar
Doha, QAT
Adheya Technologies seeks an Oracle Fusion Consultant for a techno-functional role in Qatar. The consultant will administer, develop, and support Oracle Fusion Cloud ecosystem, including VBCS, OIC, and BI Publisher. Requ
Infrastructure Cloud Services Consultant (Hybrid) for Qatar
Doha, QAT
We are looking for an Infrastructure Cloud Services Consultant for a hybrid role in Qatar. The ideal candidate will have experience with Active Directory, SCCM, VMware, Hyper-V, Veeam, Linux, Azure, and automation tools.
Detection Engineering Consultant (Cyber Security) for Qatar
Doha, QAT
IT Support Consultant for Qatar
Doha, QAT
IT Business Analyst (.Net) for Qatar location.
Doha, QAT
IT service management Consultant (ITIL) for Qatar
Doha, QAT
Network Support – L2/L3 for Qatar
Doha, QAT
L2/L3 IT Support Engineer for Qatar
Doha, QAT
Oracle Fusion Consultant for Qatar
Doha, QAT
Infrastructure Cloud Services Consultant (Hybrid) for Qatar
Doha, QAT