Siem Splunk Engineer

2 days ago

Singapore JANUARY CONSULTANCY SERVICES PTE. LTD. Full time

Perform SIEM health check
- Monitor SIEM Server Storage, CPU and Memory Usage and perform necessary action.
- Perform SIEM version upgrade
- Update splunk configurations based on security advisory
- SIEM Infra Tuning and Performance Optimization

**1. Splunk Platform Management**:

- Deploy, configure, and maintain **Splunk Enterprise / Splunk Cloud**.
- Manage **indexers, forwarders, search heads**, and other components.
- Ensure **high availability**, performance tuning, and scalability of the Splunk infrastructure.

**2. Data Ingestion & Parsing**:

- Onboard and normalize **log data**from various sources (firewalls, servers, endpoints, cloud, etc.).
- Create and maintain **data inputs, field extractions**, and **source types**.
- Implement **Common Information Model (CIM)**for standardized field mapping.

**3. Security Monitoring & Use Case Development**:

- Design and develop **security use cases**and **correlation rules**.
- Create **real-time alerts**, **dashboards**, and **reports**to detect suspicious activity.
- Continuously **fine-tune and optimize**detections to reduce false positives.

**4. Threat Detection & Incident Response**:

- Work with SOC teams to support **incident detection, investigation, and response**.
- Assist in **triaging alerts**and performing **root cause analysis**using Splunk queries.
- Enable **threat hunting**by developing custom SPL (Search Processing Language) queries.

**5. Dashboarding & Reporting**:

- Develop custom **visualizations**, **dashboards**, and **executive reports**for stakeholders.
- Provide insights into **security posture**, **compliance**, and **incident trends**.

**6. Integration with Security Tools**:

- Integrate Splunk with other security tools and technologies (e.g., **Firewalls, EDR, IAM, Threat Intel Platforms, SOAR**).
- Support automated workflows with **Splunk SOAR (formerly Phantom)**for faster response.

  • Splunk Engineer

    2 weeks ago

    Singapore TOSS-EX PR PTE. LTD. Full time

    SIEM Infrastructure administration Perform SIEM health check Monitor SIEM Server Storage, CPU and Memory Usage and perform necessary action. Perform SIEM version upgrade Update splunk configurations based on security advisory SIEM Infra Tuning and Performance Optimization Monitor SIEM data sources proactively to identify issues in the environment (ex: Index...

  • Splunk Engineer

    2 weeks ago

    Singapore TOSS-EX PR PTE. LTD. Full time

    SIEM Infrastructure administration • Perform SIEM health check• Monitor SIEM Server Storage, CPU and Memory Usage and perform necessary action.• Perform SIEM version upgrade• Update splunk configurations based on security advisory• SIEM Infra Tuning and Performance Optimizationo Monitor SIEM data sources proactively to identify issues in the...

  • Technical Architect

    1 week ago

    Singapore VUI SYSTEMS PTE. LTD. Full time

    **Key Responsibilities**: - Design and architect Splunk-based SIEM solutions to meet organizational security requirements. - Lead the deployment and configuration of Splunk Enterprise and Splunk Enterprise Security (ES). - Develop and maintain Splunk architecture documentation including data flow diagrams, integration points, and system dependencies. -...

  • Apac Gss Security Solutions Engineer

    4 days ago

    Singapore Splunk Full time

    Join our innovative mission at Splunk to make machine data accessible, usable, and valuable to everyone. We're not just a company, we're a community of passionate individuals dedicated to our product, delivering unparalleled experiences for our customers. At Splunk, commitment to our work, customers, fun, and, most importantly, to each other's success is...

  • SIEM Security Specialist

    2 weeks ago

    Singapore beBeeSiem Full time

    Job Title: Siem Security Specialist We are seeking a skilled SIEM security specialist to join our team. The ideal candidate will have experience in SIEM infrastructure administration, data onboarding, use case development, and troubleshooting. Responsibilities Perform regular SIEM health checks to ensure optimal performance Monitor SIEM server...

  • Data Analyst

    4 days ago

    Singapore SAGL CONSULTING PTE. LTD. Full time

    **Job Summary**: **Key Responsibilities**: - Analyze and interpret security event data from SIEM platforms (e.g., Splunk, QRadar, ArcSight, etc.) - Develop and maintain parsers, regex rules, and data normalization scripts - Understand and work with SIEM data models to improve log ingestion and correlation logic - Write Python or shell scripts to automate...

  • Data Analyst

    1 week ago

    Singapore SAGL CONSULTING PTE. LTD. Full time

    Overview Job Summary: We are seeking a skilled Data Analyst with hands-on experience in cybersecurity log analysis, SIEM data models, and scripting. The ideal candidate will work closely with security teams to parse, analyze, and enrich log data from various sources, helping improve threat detection and monitoring effectiveness. Responsibilities Analyze and...

  • Data Analyst

    2 weeks ago

    Singapore SAGL CONSULTING PTE. LTD. Full time

    Job Summary: We are seeking a skilled Data Analyst with hands-on experience in cybersecurity log analysis, SIEM data models, and scripting. The ideal candidate will work closely with security teams to parse, analyze, and enrich log data from various sources, helping improve threat detection and monitoring effectiveness.Key Responsibilities: Analyze and...

  • Splunk Engineer

    2 weeks ago

    Singapore Unison Consulting Pte Ltd Full time

    The proposed Splunk Engineer shall have the following qualifications: At least 3 years experience working on Splunk system Possess Splunk Enterprise Certified Admin certifications or equivalent. Working arrangement: Ability to work independently and ensure the smooth operation of the System. Official working hours: 8:30 am to 6:00 pm (Monday to Thursday),...

  • Security Advisor

    2 days ago

    Singapore Splunk Full time

    Splunk is here to build a safer and more resilient digital world. The world's leading enterprises use our unified security and observability platform to keep their digital systems secure and reliable. While customers love our technology, it's our people that make Splunk stand out as an amazing career destination and why we've won so many awards as a best...