شرح موقعیت
About this Job: We are seeking a skilled Managed Services Consultant with strong hands-on experience in Splunk Enterprise administration, SIEM content development, Splunk Enterprise Security (ES), and Splunk User Behavior Analytics (UBA). Key Administer Splunk Enterprise, including deployment, user management, licensing, upgrades, patches, configuration, change management, reporting, backup, and recovery. Onboard, monitor, and troubleshoot log sources to ensure continuous log ingestion. Develop and maintain security use cases, correlation rules, dashboards, alerts, reports, report templates, and SPL queries using Splunk Enterprise Security. Review existing Splunk configurations and recommend enhancements. Manage SIEM support tickets and resolve log-source ingestion issues. Develop custom parsing rules for non-standard logs. Configure threat feeds, Indicators of Compromise (IoCs), Sigma rules, and security advisories. Support regulatory audits in Saudi Arabia and provide the required evidence from the SIEM solution. Administer Splunk UBA, including ingestion of CIM-compliant data, raw events, and HR data from the Splunk platform. Monitor Splunk UBA health using the UBA Monitoring App and manage backups and failover procedures. Required Qualifications & Skills: Minimum 5 years of relevant Splunk/SIEM experience. Strong expertise in Splunk Enterprise administration. Hands-on experience with Splunk Enterprise Security and SIEM use-case development. Knowledge of log onboarding, parsing, SPL queries, and correlation searches. Experience in Splunk UBA administration, monitoring, and troubleshooting. Understanding of threat intelligence and security compliance requirements. Nationality Male candidates: All nationalities are welcome. Female candidates: Saudi nationals only. Also, You can forward your CV through below link for more upcoming Job vacancies: https://cv-fnrco.com