Splunk Integration & Data Engineers
Job Description
- Expertise: Splunk Enterprise Certified Admin, 3–5 years in log onboarding and integration.
- Responsibilities:
- Manage data source onboarding, parsing, and CIM alignment.
- Review and optimize data models and field extractions.
- Ensure integrations with security technologies (EDR, IAM, WAF, Firewalls, DLP, etc.).
- Manage troubleshooting of ingestion and parsing issues.
Qualifications
- Proven experience in managing enterprise Splunk environments at scale (preferably in banking/financial institutions).
- Certified Splunk engineers across architecture, administration, and use case development.
- Ability to provide at least 5 full-time technical resources.
- 24x7 support capabilities with SLA-driven response times.
- Familiarity with regulatory and compliance requirements in the financial sector (SAMA CSF, NCA, PCI DSS, etc.).