Splunk Security Infrastructure Engineer

About the role

The Splunk Security Infrastructure Engineer will join the Security Operations team in Doha, managing and supporting the organization’s Splunk Enterprise and Splunk Cloud environments. This role ensures the SIEM platform remains highly available, secure, and optimised for security monitoring.

Key responsibilities

• Perform day‑to‑day Splunk administration, including cluster management and upgrades.
• Onboard and integrate new data sources, handling parsing, regex, field extractions, data models and normalization.
• Maintain Search Head and Indexer clusters to guarantee performance and data integrity.
• Support Splunk Enterprise Security (ES) and related security monitoring use cases.
• Ensure all ingested data complies with the Common Information Model (CIM).

Required profile

• 3–5 years of hands‑on experience with Splunk administration, SIEM engineering or Security Operations.
• Strong problem‑solving and communication skills.
• Bachelor’s degree in Computer Science, IT, Cybersecurity or a related field.
• At least one Splunk Administration certification (Core Certified Power User, Enterprise Certified Admin).

Required skills

• Splunk Enterprise and Splunk Cloud
• Splunk clustering, upgrades and troubleshooting
• Splunk Enterprise Security (ES)
• Splunk SOAR (preferred)
• SIEM concepts and CIM compliance