Splunk Security Infrastructure Engineer

Splunk Security Infrastructure Engineer (Splunk Administrator)

Location: Doha, Qatar

Contract: 12 Months – Yearly Renewable

We are looking for a Splunk Security Infrastructure Engineer to manage and support Splunk environments within the Security Operations team.

The Splunk Administrator is responsible for the deployment, configuration, administration, and optimization of the organization's Splunk Enterprise and Splunk Cloud environments. This role serves as the primary technical owner of the Splunk platform within the Security Operations (SecOps) team, ensuring high availability, data integrity, and peak performance of the SIEM ecosystem.

Key Responsibilities

• Day-to-day Splunk administration and engineering.
• Onboard and integrate new data sources.
• Manage Search Head & Indexer Clusters.
• Perform Splunk upgrades, configuration, troubleshooting, and optimization.
• Handle parsing, regex, field extractions, data models, and normalization.
• Ensure data is CIM-compliant.
• Support Splunk Enterprise Security (ES) and security monitoring.

Requirements

• 3–5 years of hands-on experience in Splunk administration, SIEM engineering, or Security Operations.
• Strong hands-on experience with Splunk clustering, onboarding, upgrades, and troubleshooting.
• At least one Splunk Administration certification is mandatory.
• Good communication and problem-solving skills.

Academic & Professional Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Information Technology, Cybersecurity, or equivalent.
• Splunk Core Certified Power User – Required.
• Splunk Enterprise Certified Admin – Required.
• Splunk Enterprise Security Certified Admin – Preferred.
• Splunk SOAR Certified Automation Developer – Preferred.
• Preferred security certifications: CompTIA Security+, CySA+, CEH, CISSP, or GCI

Interested candidates can share their updated CV to [Confidential Information]