Splunk Security Infrastructure Engineer

About the role

We are seeking a Splunk Security Infrastructure Engineer to join our Security Operations team in Doha. You will be the primary technical owner of the Splunk platform, ensuring its high availability, data integrity, and optimal performance.

Key responsibilities

• Administer and engineer Splunk environments on a day‑to‑day basis.
• Onboard and integrate new data sources, handling parsing, regex, field extractions, data models, and normalization.
• Manage Search Head and Indexer clusters, perform upgrades, configuration, troubleshooting, and performance tuning.
• Maintain CIM compliance and support Splunk Enterprise Security for security monitoring.

Required profile

• 3–5 years of hands‑on experience in Splunk administration, SIEM engineering, or Security Operations.
• Bachelor’s degree in Computer Science, IT, Cybersecurity or a related field.
• At least one Splunk Administration certification (Core Certified Power User, Enterprise Certified Admin).
• Strong communication and problem‑solving abilities.

Required skills

• Regex field extractions
• Data models
• Splunk Enterprise
• Search Head & Indexer clusters
• Normalization
• Splunk Cloud
• Splunk Enterprise Security
• General Splunk platform expertise