{bc}
linkedin

Splunk SIEM Engineer (RE)

Innovative Solutions SA
Riyadh, KSA
Contract
Mid
1 months ago
SplunkSIEMData IngestionLog AnalysisSecurity OperationsLinux
Free

Job Fit Check

Base Career helps you apply smarter for this job.

?%
Ready to Scan

Key skills for this role

SplunkSIEMData Ingestion
Smart Apply

Full Job Posting

Company Description

  • Innovative Solutions (IS) is a leading Cybersecurity company established in 2003, with headquarters in Riyadh and offices in Al Khobar, Jeddah, Dubai, and Abu Dhabi.
  • We specialize in delivering Comprehensive Cybersecurity Solutions and Services encompassing Advisory Services, Technical Assurance, Solution Deployment, Professional Services, and Managed Security Services.

Role Overview

  • We are seeking a Splunk SIEM Engineer to provide hands on support, administration, optimization, and continuous enhancement of the Splunk environment.
  • The role is responsible for ensuring the reliability, performance, and effectiveness of Splunk services while supporting security monitoring and operational use cases.

Responsibilities

  • Perform indexing and data ingestion activities, including ingesting, parsing, and indexing log sources to ensure accurate, consistent, and searchable data.
  • Identify and resolve ingestion related issues such as parsing errors, timestamp extraction problems, event breaking, line breaking, and truncation.
  • Monitor Splunk system performance and optimize queries, dashboards, index configurations, and data retention policies to meet defined SLAs.
  • Review existing Splunk architecture and indexing capacity, and provide recommendations to improve scalability, reliability, and cost efficiency.
  • Design, configure, and maintain alerts, correlation searches, dashboards, and reports based on operational and user requirements.
  • Diagnose system issues and failures, conduct root cause analysis, implement remediation actions, and perform follow up verification.
  • Ensure the Splunk environment follows security best practices and applicable compliance requirements, including access controls and auditing.
  • Maintain up to date technical documentation, runbooks, and user guides.
  • Deliver knowledge transfer sessions to operations and engineering teams.
  • Maintain a comprehensive inventory of Splunk content, including dashboards, saved searches, alerts, correlation searches, lookup tables, macros, knowledge objects, and use cases.
  • Classify Splunk content by owner, business function, usage frequency, and last modified date.
  • Provide end to end SIEM capabilities, including detection, alerting, and response for security threats and operational risks.

Requirements

  • Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
  • 3 5 years of relevant experience in Splunk administration, engineering, or SIEM operations.
  • Strong understanding of Splunk architecture and data flow concepts.
  • Solid knowledge of security operations and SIEM principles.
  • Ability to analyze system performance and identify optimization opportunities.
  • Strong analytical and problem solving skills for diagnosing system and data issues.
  • Good understanding of security best practices and compliance concepts.
  • Ability to work with technical documentation and structured operational processes.
  • Strong communication skills for coordination with technical and operational teams.
  • Familiarity with AI tools and technologies.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Innovative Solutions SA