splunk developer

Al Adyat consultancy

Role OverviewOwns end-to-end delivery of the Splunk Phantom (SOAR) platform, covering architecture, design, playbook development, integrations, automation, tuning, and structured handover into security operations.Key Responsibilities&middot; Lead solution architecture and detailed design (HLD / LLD) for Splunk SOAR&middot; Build, configure, and maintain the Splunk SOAR platform and core components&middot; Design, develop, and optimize automation playbooks for security incident response&middot; Integrate SOAR with SIEM, EDR, IAM, threat intelligence, and enterprise tooling&middot; Implement orchestration workflows aligned to SOC processes and use cases&middot; Test, validate, and tune playbooks to ensure reliability and operational effectiveness&middot; Troubleshoot platform, integration, and automation issues&middot; Produce operational documentation and conduct knowledge transfer to run teams&middot; Support stabilization and transition into BAU operationsSkills and Experience&middot; Strong hands-on experience with Splunk SOAR (Phantom)&middot; Proven experience in SOAR architecture, automation, and playbook development&middot; Strong understanding of SOC operations and incident response workflows&middot; Experience integrating SOAR with SIEM, EDR, ticketing, and threat intelligence platforms&middot; Experience producing technical design and operational handover documentationKey Deliverables&middot; SOAR solution architecture and design documentation&middot; Configured and integrated Splunk SOAR platform&middot; Implemented and validated automation playbooks&middot; Runbooks, SOPs, and formal handover to operationsPay: QAR12,000.00 - QAR14,000.00 per monthEducation:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>Splunk SOAR (Phantom): 3 years (Required)</li><li>integrating SOAR with SIEM, EDR, ticketing: 3 years (Required)</li></ul>Language:<ul><li>Arabic (Required)</li><li>English (Required)</li></ul>License/Certification:<ul><li>degree in computer science (Required)</li></ul>Location:<ul><li>Doha (Required)</li></ul>Work Location: In person

SOAR Specialist (Splunk)

Role OverviewOwns end-to-end delivery of the Splunk Enterprise (SIEM) platform, covering architecture, design, onboarding, configuration, tuning, use case implementation, and structured handover into operations.Key Responsibilities&middot; Lead solution architecture and detailed design (HLD / LLD) for Splunk SIEM&middot; Build, configure, and manage Splunk platform components including indexers, search heads, forwarders, and apps&middot; Onboard log sources and data feeds in line with security logging standards&middot; Develop, tune, and optimize correlation searches, alerts, and detections&middot; Implement threat-based and use-case-driven monitoring aligned to MITRE ATT&amp;CK&middot; Validate data quality, parsing, normalization, and field extractions&middot; Integrate Splunk with upstream and downstream tools including EDR, SOAR, ticketing, and threat intelligence&middot; Produce operational documentation and conduct knowledge transfer to run teams&middot; Support stabilization and transition into BAU operationsSkills and Experience&middot; Strong hands-on experience with Splunk Enterprise SIEM&middot; Proven experience in SIEM architecture, engineering, log onboarding, and use-case development&middot; Strong understanding of security logging, detection engineering, and incident response&middot; Experience integrating SIEM with EDR, SOAR, and enterprise security tooling&middot; Experience producing technical design and operational handover documentationKey Deliverables&middot; SIEM solution architecture and design documentation&middot; Configured and optimized Splunk SIEM platform&middot; Implemented and tuned detection and monitoring use casesRunbooks, SOPs, and formal handover to operationsPay: QAR12,000.00 - QAR14,000.00 per monthEducation:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>Splunk Enterprise (SIEM) platform: 3 years (Required)</li><li>EDR, SOAR, and enterprise security tooling: 3 years (Required)</li></ul>Language:<ul><li>Arabic (Required)</li><li>English (Required)</li></ul>License/Certification:<ul><li>degree in computer science (Required)</li></ul>Location:<ul><li>Doha (Required)</li></ul>Work Location: In person

SIEM Specialist (Splunk)

DeepSource Technologies

<div><ul><li>Design, implement, and manage complex Splunk environments to ensure high availability and performance.</li>
<li>Develop and deploy Splunk applications, dashboards, and reports for monitoring and analysis.</li>
<li>Perform data ingestion from various sources and ensure data accuracy and integrity.</li>
<li>Troubleshoot and resolve technical issues related to Splunk instances and forwarders.</li>
<li>Optimize Splunk searches, queries, and performance using best practices.</li>
<li>Work closely with security, operations, and development teams to integrate Splunk into existing workflows.</li>
<li>Conduct training and provide support to team members and end-users on Splunk capabilities.</li>
<li>Stay updated with the latest Splunk features, best practices, and industry trends.</li> 
</ul> 
 
Requirements 
<ul>
<li>Proven experience as a Senior Splunk Engineer with 5+ years of hands-on experience in deploying and managing Splunk environments.</li>
<li>Strong knowledge of Splunk architecture, administration, and data ingestion methodologies.</li>
<li>Experience in creating Splunk dashboards, reports, and alerts.</li>
<li>Familiarity with scripting languages (e.g., Python, PowerShell) for automation and customization.</li>
<li>Excellent troubleshooting skills and ability to work under pressure.</li>
<li>Strong analytical and problem-solving abilities.</li>
<li>Experience working in a collaborative team environment.</li>
<li>Certification as a Splunk Certified Admin or Splunk Certified Architect is a plus.</li> 
</ul> 
 
Benefits 
o Medical insurance including family.
o Flight tickets including family.</div>

Senior Cybersecurity Engineer - Splunk - Riyadh, KSA

Role OverviewOwns end-to-end delivery of threat intelligence onboarding and integration using Anomali, including architecture, data ingestion, enrichment, correlation, and integration with Splunk SIEM and Splunk SOAR to enhance detection, investigation, and automated response capabilities.Key Responsibilities&middot; Lead solution architecture and detailed design (HLD / LLD) for threat intelligence integration&middot; Deploy, configure, and optimize Anomali Threat Intelligence Platform&middot; Onboard threat intelligence feeds and manage lifecycle, scoring, and confidence tuning&middot; Integrate Anomali with Splunk SIEM for enrichment, correlation, and detection enhancement&middot; Integrate threat intelligence into Splunk SOAR playbooks for automated response&middot; Implement use cases aligned to SOC investigation and threat hunting workflows&middot; Validate data quality, mappings, and enrichment effectiveness&middot; Troubleshoot integration, data, and performance issues&middot; Produce operational documentation and conduct knowledge transfer to run teams&middot; Support stabilization and transition into BAU operationsSkills and Experience&middot; Strong hands-on experience with Anomali Threat Intelligence Platform&middot; Experience integrating threat intelligence with Splunk SIEM and Splunk SOAR&middot; Strong understanding of threat intelligence lifecycle, IOC management, and enrichment&middot; Knowledge of SOC operations, threat detection, and incident response&middot; Experience producing technical design and operational handover documentationKey Deliverables&middot; Threat intelligence architecture and integration design documentation&middot; Configured Anomali TIP integrated with Splunk SIEM and SOAR&middot; Enrichment and correlation use cases implemented&middot; Runbooks, SOPs, and formal handover to operationsPay: QAR12,000.00 - QAR14,000.00 per monthEducation:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>Anomali Threat Intelligence Platform: 3 years (Required)</li><li>Splunk SIEM and Splunk SOAR: 3 years (Required)</li></ul>Language:<ul><li>Arabic (Required)</li><li>English (Required)</li></ul>License/Certification:<ul><li>degree in computer science (Required)</li></ul>Location:<ul><li>Doha (Required)</li></ul>Work Location: In person

Threat Intelligence Specialist (Anomali / Splunk)

RELYzIT

<div>
 
 Sr. Splunk ES Consultant (Freelance) - 3 months- Riyadh, Saudi Arabia
 
 
 At RELYzIT Talent, we don&rsquo;t recruit &mdash; we build. We unite the top 2% of builders &mdash; engineers, architects, creators &mdash; into a movement across Europe and the GCC. Vetted through our VECTOR7&trade; Signal Stack, you&rsquo;re not just hired, you&rsquo;re chosen. This is more than work. This is where builders build the future.
 
 
 About the Role
 
 
 We are seeking a hands-on, Riyadh-based Sr. Splunk Enterprise Security Consultant for a freelance engagement with our client. This is a high-impact role in a high-pressure, regulated environment where your expertise will directly shape security outcomes. You&rsquo;ll be the go-to builder for Splunk ES administration, driving mission-critical security operations and ensuring robust, audit-ready environments.
 
 
 Why This Role Matters
 
 
 Our client operates in a landscape where security, compliance, and real-time insights are non-negotiable. As a Splunk ES Consultant, you will be instrumental in architecting, optimizing, and troubleshooting the backbone of their security intelligence. Your work will empower teams to detect threats faster, respond smarter, and maintain the highest standards of compliance &mdash; making a tangible impact on business resilience and trust.
 
 
 What You&rsquo;ll Be Doing
 
 <ul>
 <li>
 Administer and optimize Splunk Enterprise Security (ES) environments, including Indexers, Search Heads, and clustering.
 </li>
 <li>
 Deploy and manage Universal Forwarders (UF) and Heavy Forwarders (HF) for seamless data ingestion.
 </li>
 <li>
 Lead end-to-end data onboarding from diverse sources: Windows, Linux, network devices, cloud platforms, and APIs.
 </li>
 <li>
 Configure and fine-tune props.conf and transforms.conf for data normalization and enrichment.
 </li>
 <li>
 Implement and maintain CIM normalization to ensure consistent, actionable data models.
 </li>
 <li>
 Design, build, and optimize SPL queries, alerts, dashboards, and correlation rules for proactive threat detection.
 </li>
 <li>
 Troubleshoot ingestion delays, license issues, and search performance bottlenecks with precision and urgency.
 </li>
 <li>
 Integrate Splunk ES with critical security infrastructure: firewalls, proxies, EDR, Active Directory, and more.
 </li>
 <li>
 Collaborate with security and compliance teams to ensure audit readiness and evidence management.
 </li>
 </ul>
 
 Technical Skills &amp; Experience
 
 <ul>
 <li>
 Proven hands-on experience in Splunk ES administration (not just analysis).
 </li>
 <li>
 Deep knowledge of Indexers, Search Heads, clustering, and distributed Splunk architectures.
 </li>
 <li>
 Expertise in deploying and managing UF/HF, and onboarding data from multiple environments.
 </li>
 <li>
 Strong command of SPL, dashboard creation, alerting, and correlation rule development.
 </li>
 <li>
 Advanced troubleshooting skills for ingestion, licensing, and performance issues.
 </li>
 <li>
 Experience with CIM normalization and configuration of props.conf/transforms.conf.
 </li>
 <li>
 Integration experience with firewalls, proxies, EDR, and Active Directory.
 </li>
 <li>
 Bonus: Experience with Splunk ES use cases, incident triage, and UBA exposure.
 </li>
 <li>
 Bonus: Background in audit-ready, compliance-driven environments and ITIL awareness.
 </li>
 </ul>
 
 Mindset &amp; Approach
 
 <ul>
 <li>
 Builder mentality: You own outcomes, not just tasks.
 </li>
 <li>
 Problem-solver: You thrive in high-pressure, regulated environments and deliver under tight deadlines.
 </li>
 <li>
 Compliance-driven: You understand the importance of evidence, audit trails, and regulatory standards.
 </li>
 <li>
 Ready to hit the ground running &mdash; this is not a learning role.
 </li>
 </ul>
 
 Language Proficiency
 
 <ul>
 <li>
 Fluent English required (spoken and written).
 </li>
 </ul>
 
 Other Requirements
 
 <ul>
 <li>
 Based in Riyadh, Saudi Arabia.
 </li>
 <li>
 Freelance position with immediate start and project-based duration.
 </li>
 <li>
 Experience in regulated, audit-ready environments preferred.
 </li>
 <li>
 Awareness of ITIL or similar frameworks is a plus.
 </li>
 </ul>
 
 
 
 
 
 
 
 
 Ready to build the future with us? Upload your CV and join the movement of elite builders at RELYzIT Talent
 
 
 
 
 
 
 .
 
 
 #RELYzIT #TechJobs #FreelanceTalent #Riyadh #Splunk #SplunkES #SecurityEngineering #SIEM #CyberSecurity #VECTO
 
 
 
 
 
 R7
 
</div>

Senior Splunk ES Consultant

<div></div><div><div><div><div><ul><div>2 - 3 Years</div>
<div></div><div>1 Opening</div>
 <div>Hyderabad</div></ul></div><div> 
<div><div>
</div></div></div></div><div></div><div><h3 class="jobSectionHeader">Role description</h3>
<div>Role Overview 
The SIEM Senior Engineer is responsible for hands-on engineering, enrichment, and monitoring of security s using Splunk. This role focuses on building high-quality detections, enriching s with meaningful context, and improving SOC analyst efficiency by reducing false positives and improving signal quality. The role works closely with SOC Analysts, SIEM Leads, and Security Engineering teams. 
Key Responsibilities 
Engineer, maintain, and tune Splunk-based SIEM s and correlation rules. 
Monitor security s to ensure accuracy, relevance, and operational readiness. 
Continuously tune s to improve signal-to-noise ratio and reduce false positives. 
Implement enrichment using identity, asset, vulnerability, and threat intelligence data. 
Ensure s contain actionable context such as user, asset, privilege, and business impact. 
Support Splunk log onboarding, data normalization, and CIM compliance. 
Optimize SPL searches, dashboards, and saved searches. 
Support L2/L3 troubleshooting for SIEM s and ingestion issues. 
Develop detection use cases aligned to the MITRE ATT&amp;CK framework. 
Maintain SOPs, runbooks, and SIEM documentation. 
Required Skills &amp; Experience 
3-5 years of experience in SIEM, SOC, or Security Engineering roles. 
Strong hands-on experience with Splunk
 
Proven experience in SIEM creation, tuning, and enrichment. 
Strong understanding of security telemetry across endpoint, network, cloud, and IAM. 
Proficiency in SPL (Search Processing Language). 
Understanding of SOC workflows and incident triage. 
Familiarity with the MITRE ATT&amp;CK framework. 
Preferred Qualifications 
Experience integrating Splunk with IAM, CMDB, vulnerability, and threat intelligence tools. 
Exposure to SOAR platforms and automated response workflows. 
Scripting experience using Python or PowerShell. 
Experience working in regulated environments such as healthcare or financial services. 
Relevant Splunk or security certifications.</div> 
<h3 class="jobSectionHeader">Skills</h3>
<div>siem,security s, tuning, enrichment,</div></div></div></div>
 <div><h3 class="jobSectionHeader">About UST</h3>
<div>UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world&rsquo;s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients&rsquo; organizations. With over 30,000 employees in 30 countries, UST builds for boundless impact&mdash;touching billions of lives in the process.</div></div>

SIEM Enrichment & Monitoring

Cisco

This role requires FRENCH Speaking covering North West Central Africa, based from Dubai where you will already be based.
 
Account Executive, Splunk
 
This role Influences and drives strategic decisions within Splunk customer’s buying center by leveraging SaaS and cloud expertise with cybersecurity and observability competitor and market insights. Serves as the Account Orchestrator, aligning and integrating Splunk products, services, and solutions with customers’ strategic goals and needs, driving incremental revenue growth and recurring revenue. Maintains a comprehensive understanding of Splunk’s products, services, and solutions. Liaises with other portfolio sellers to ensure adherence and alignment to GTM processes, tools, and methodologies. Owns the legal goal, creates and manages quality pipeline, develops business, negotiates, and closes the deal. Builds the sales funnel through opportunity prospecting, develops and owns opportunities through to sales completion to achieve revenue goals. Analyses data and creates forecasts to set weekly, monthly, and quarterly sales commitments. Conducts business and technical evaluations to ensure proposals meet customers’ business objectives. Identifies new land opportunities, develops proposals, and creates account plans. Closely monitors cybersecurity and observability trends, market dynamics, and competitive landscapes
 
<ul>
<li>Specialization and Focus - Specialist in Splunk solutions, services, and products</li>
<li>Customer Engagement and Accountability - Primary influencer. Oversees overall customer strategy, value, and relationship. Develops deep understanding of customer business risk and opportunities to ensure value realization</li>
<li>The Internal Sales Process - All deal stages. Spends most of the time between prospect/qualification and proposal of the deal</li>
<li>Corporate Interlock - Low corporate interlock</li>
<li>Typical Sales Cycle - Medium Sales complexity. Average length of deal is 3-6 months but can be as long as 12-18 months in more complex accounts/opportunities. Variable deal size, can be between $50K to $750K (over $1M for SP)</li>
<li>Success Measures - Sustained Splunk portfolio growth, account growth, account retention, incremental annual contract value (IACV)</li>
</ul>
What You'll Do: 
<ul>
<li>Manage North West Africa Region</li>
</ul>
Orchestrates multi-faceted, highly complex deal cycles, often involving multiple stakeholders with significant incremental revenue growth
 <ul>
<li>Typically prospects new deals with C-suite, buyers, executives at all levels</li>
<li>Cultivates expert knowledge of the security, observability and cloud/SaaS market knowledge, advising customers on lifecycle adoption and alignment with customer strategic initiatives</li>
<li>Anticipates evolving customer needs, leveraging specialized knowledge of customer business models, industry trends, and value drivers</li>
<li>Applies competitor and customer insights to build effective account strategy and relationship map</li>
<li>Identifies and interprets shifts in the security and observability competitive landscape (including competitor insights) to provide strategic recommendations to internal and external stakeholders</li>
<li>Leads executive-level engagements by championing innovative, customer-first strategies that drive business transformation and long-term value realization</li>
<li>Expertly navigates commercial, legal, and technical requirements and risks to realize business value</li>
<li>Leads negotiations with a consultative approach by balancing competitive pricing, service levels, and contractual commitments to secure customer-first agreements</li>
<li>Reviews, prioritizes, and aligns customer needs and Splunk portfolio strategy to drive significant incremental annual contract value</li>
<li>Leads Splunk account planning and leverages innovative channels to identify new consumption options within Splunk while mitigating risk</li>
<li>Demonstrates deep technical comprehension of technical solutions and their long-term value/ROI in customer context</li>
<li>Integrates CRM data with business intelligence tools to develop scalable operational frameworks for sales process optimization and tool utilization</li>
<li>Partners with other account executive resources to provide insights to Rev Ops, finance, legal, and procurement teams for cross-functional workflow enhancement</li>
<li>Champions GTM-wide collaboration that influences Splunk and customer organizations</li>
</ul>
Essential
 Bachelors + 8 years of related experience in a similar role within a Software Company, selling into North West Africa, must be French Speaking.
 
Why Cisco?
 
At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint.
 Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere.
 We are Cisco, and our power starts with you.

Account Executive - Splunk FRENCH North West Central Africa

Search 1102+ Splunk developer jobs near you this May. New roles added regularly across leading industries. Apply today.