Specialist - Architecture

Senior Splunk Engineer

What you will be doing

The Senior Splunk Engineer will be part of the SecOps Technology Engineering team, responsible for the Splunk SIEM and SOAR platforms and other technologies that support Global Cybersecurity Operations. The team collaborates with IT Infrastructure teams to deliver end-to-end deployment of security technologies across the firm.

The role includes architectural design and technical support for SIEM and SOAR platform infrastructure—Splunk Phantom and AWS. This covers system integration and interoperability across application components and systems programming, ingestion and normalization of security log sources, patching and upgrades, capacity planning, performance management, and use case development.

The position calls for an experienced systems engineer with strong technical leadership and collaboration skills. The ideal candidate will bring substantial experience with SIEM technologies, Linux and/or Windows system administration, and cloud infrastructure, including experience with Splunk ES, Splunk SOAR, RHEL, AL2, Windows Server, and AWS platform services.

Responsibilities will include But not limited to

Engineering leadership and support for existing and future SIEM and SOAR technologies including Splunk ES, Phantom, etc.

Leading the continued technical enhancement of security platforms.

Supporting the identification, development, and implementation of new detections and use cases.

Leading the continued evolution of automation and orchestration across the platform.

Training and developing other members of the Logging and Operations team, as well as other members of the engineering function.

Supporting a culture of individual self-improvement, where staff are expected to maintain subject matter expertise within their area of focus and across cybersecurity more broadly—e.g., staying current on the latest forensic techniques and tooling for strategically important platforms.

Taking a leading role in engaging Global Businesses and Functions to drive global uplift in cybersecurity awareness.

Collaborating with different layers of management across Cybersecurity and other IT teams to develop solutions that protect the organisation.

Designing and driving the implementation of new service offerings, capability uplifts, and process improvements to protect the bank in a continuously changing threat landscape.

What you will bring to the role

To be successful in this role you should have proven experience within the Technology sector with knowledge of the following skills

Technical expertise of enterprise-level SIEM technology and logging frameworks

Extensive experience in deploying, configuring, upgrading, and administering Splunk clusters at scale

An ability to perform installation, configuration, management, capacity planning, license management, data integration, data transformation, field extraction, event parsing, data preview, and application management of Splunk

Scripting/Programming experience with Python, Bash, Powershell

An ability to communicate complex and technical issues to diverse audiences

Self-motivated and possessing of a high sense of urgency and personal integrity

A team-focused mentality with the proven ability to work effectively with diverse stakeholders

Ability to orchestrate, manage, and successfully implement major procedural and technological change within a complex global organization

Formal education and advanced degree in Information Security