Senior SOC Engineer – SIEM (Splunk)

About the role

The Senior SOC Engineer will lead the management and evolution of the Splunk SIEM and UEBA platforms within our Security Operations Center. You will be responsible for onboarding new log sources, optimizing telemetry, and ensuring the SIEM environment remains performant and aligned with business security requirements.

Key responsibilities

• Manage Splunk SIEM services, including deployment, configuration, and ongoing maintenance.
• Define data ingestion strategies, create parsing logic, and develop correlation rules.
• Onboard and integrate new log sources, ensuring accurate data collection.
• Monitor system health, troubleshoot issues, and perform version upgrades and feature rollouts.
• Collaborate with SOC analysts and threat intelligence teams to design detection use cases, dashboards, alerts, and reports.
• Maintain CIM compliance, field extractions, and data normalization.
• Evaluate, install, and configure Splunk apps and add‑ons as needed.
• Document SIEM workflows, configurations, and operational procedures.

Required profile

• Bachelor’s degree in Computer Science, IT, Cybersecurity or a related field.
• Minimum 5 years of experience in SOC operations with strong Splunk SIEM expertise.
• Proven ability to lead technical initiatives and work independently.
• Excellent communication and documentation skills.

Required skills

• Splunk administration and deep knowledge of SPL (Search Processing Language).
• Scripting in Python, Bash, and PowerShell.
• Cloud certifications: AWS Solutions Architect, Google Professional Cloud Architect, or Azure Solutions Architect Expert.
• Security certifications such as CISSP and GIAC (preferred).