Managed Services Consultant

We are seeking a skilled Managed Services Consultant with strong hands-on experience in Splunk Enterprise administration, SIEM content development, Splunk Enterprise Security (ES), and Splunk User Behavior Analytics (UBA).

• Administer Splunk Enterprise, including deployment, user management, licensing, upgrades, patches, configuration, change management, reporting, backup, and recovery.
• Onboard, monitor, and troubleshoot log sources to ensure continuous log ingestion.
• Develop and maintain security use cases, correlation rules, dashboards, alerts, reports, report templates, and SPL queries using Splunk Enterprise Security.
• Review existing Splunk configurations and recommend enhancements.
• Manage SIEM support tickets and resolve log-source ingestion issues.
• Develop custom parsing rules for non-standard logs.
• Configure threat feeds, Indicators of Compromise (IoCs), Sigma rules, and security advisories.
• Support regulatory audits in Saudi Arabia and provide the required evidence from the SIEM solution.
• Administer Splunk UBA, including ingestion of CIM-compliant data, raw events, and HR data from the Splunk platform.
• Monitor Splunk UBA health using the UBA Monitoring App and manage backups and failover procedures.

• Minimum 5 years of relevant Splunk/SIEM experience.
• Strong expertise in Splunk Enterprise administration.
• Hands-on experience with Splunk Enterprise Security and SIEM use-case development.
• Knowledge of log onboarding, parsing, SPL queries, and correlation searches.
• Experience in Splunk UBA administration, monitoring, and troubleshooting.
• Understanding of threat intelligence and security compliance requirements.

• Male candidates: All nationalities are welcome.
• Female candidates: Saudi nationals only.