Monitoring Specialist - Splunk & SIEM Engineer

Monitoring Specialist - Splunk & SIEM Engineer

Digital nomads. Work from anywhere

Company: ITSM Solutions International

About the Role
We are looking for an experienced Splunk Monitoring & Observability Cloud Engineer to support the implementation and optimization of enterprise monitoring solutions. The ideal candidate has extensive hands-on experience with Splunk, monitoring best practices, and observability platforms. Fluent German and English is a must for this project.
Responsibilities
* Lead day-to-day activities for maintaining Splunk, including setup, ingestion, and reviewing dashboards/reports/alerts.
* Provide support for Splunk administration, monitoring system health, and addressing issues promptly.
* Proficiency in Monitoring Tools, Linux administration, and Splunk administration, including installation, configuration modification, and agent management.
* Develop and understand scripts for managing and supporting a large Splunk environment on Linux.
* Coordinate software version changes and utilize utility tools for system monitoring.
* Contribute to process improvement and additional platform support roles, including software upgrades.
* Lead the team on projects as a primary project organizer.
Required Skills
* Architect, deploy, and maintain enterprise Splunk environments, including indexers, search heads, forwarders, and multi-region architectures.
* Design, develop, and sustain custom Splunk dashboards and analytics supporting:
* Security events, audit data, and user activity monitoring (UAM)
* STE/STN compliance, vulnerability and compliance scans
* Network/system observable events by SSP
* Containerized application events by namespace
* Mission metrics, outage tracking, and system/network utilization
* Ensure Splunk dashboards and logging infrastructure maintain =93% operational availability monthly.
* Develop and maintain dashboards for authentication events, privileged access, account management, role escalation, and container security events.
* Integrate data from NetFlow/sFlow, Syslog, Cribl, Nagios, HP NNMi, HPNA, vulnerability scanners, and compliance tools.
* Perform Splunk scaling, performance tuning, data onboarding, and index management.
Pay range and compensation package
* Project Details:
* Start: ASAP
* Duration: Initial 12 months
* Fluent German Required
* Location: Fully remote

apply

Report Page