T-Systems is a global leader in information technology and digital transformation services, operating as the enterprise IT subsidiary of Deutsche Telekom. The company provides a wide range of integrated solutions, including cloud services, cybersecurity, digital connectivity, and industry-specific software, particularly for the healthcare, public sector, and manufacturing industries. With a global workforce of approximately 27,000 employees, it serves multinational corporations and public institutions worldwide.

In Spain, T-Systems Iberia is one of the country's largest IT employers, maintaining a significant presence in major technology hubs like Barcelona, Madrid, and Granada. The company is known for its multicultural environment and its role as a strategic partner for both the Spanish public administration and the private sector. For international professionals, T-Systems offers a stable environment with opportunities to work on large-scale digital transformation projects, often utilizing English as a primary language for international accounts and cloud-native technologies.

T-Systems was founded in 2000 as the IT services arm of Deutsche Telekom following the acquisition of debis Systemhaus. It has evolved from a traditional infrastructure provider into a global leader in digital services and multi-cloud management.

For international professionals

Operates major delivery centers across Spain, including a significant innovation hub in Granada and large offices in Barcelona and Madrid.
Offers flexible work models and 'Work from Anywhere' policies for many technical and consultancy roles within the Spanish territory.
Provides extensive internal training and certification paths for high-demand technologies including SAP, AWS, Azure, and Google Cloud.
Frequently recruits for international projects where English is the primary working language, facilitating the integration of non-Spanish speakers.
Strongly involved in the digitalization of the Spanish healthcare system and public administration, offering high-impact career opportunities.

SIEM SPLUNK Administrator (m/f/d)

T-Systems Iberia

This job was originally posted in Spanish and automatically translated to English. You'll most likely need Spanish to apply.

Job Description

Company Description

T-Systems is part of the Deutsche Telekom group, with approximately 30,000 employees worldwide. We create technology with purpose to generate a positive impact on society. We are looking for curious talent, eager to learn, take on challenges, and contribute ideas that transform our customers' experience.

We trust people: we offer autonomy, continuous support, and a collaborative environment to grow without limits. We are one single global team, guided by respect, integrity, and the passion to do better every day.

Job Description

We are looking to incorporate a Splunk specialist into the SOC team, with a dynamic attitude, autonomy, and a desire to learn to face complex challenges. The main objective of this role will be to lead the configuration, administration, and optimization of the Splunk platform, ensuring its efficient integration within our security infrastructure and its ability to address the specific needs of our clients.

Key Responsibilities:

Advanced implementation and administration of the Splunk platform (Splunk Enterprise, Splunk Cloud, Splunk SOAR).
Development of custom dashboards, reports, and alerts for security monitoring and analysis.
Design, implementation, and optimization of Splunk architectures for large environments.
Integration of new data sources into Splunk, including system logs, applications, and network devices.
Automation of processes within Splunk using Splunk Apps, Python, and related tools.
Monitoring Splunk performance and capacity planning to ensure optimal operation.
Coordination with SOC teams to maximize the effectiveness of event analysis in Splunk.
High-level technical support related to Splunk, including the resolution of complex problems.
Creation of technical documentation and best practices for the use of Splunk.
Participation in the design and implementation of Splunk-based security solutions, including SOAR and advanced use cases.
Training and technical support for the team in the advanced use of Splunk.

Requirements

Education and Experience:

Education related to Systems Administration, Systems Engineering, Telecommunications, or related fields.
Minimum of 3 years of experience administering, customizing, and optimizing Splunk environments.
English level B2 or higher.

Required or highly valued certifications:

Splunk Certified Admin.
Splunk Certified Architect.
Splunk Certified Developer.

Technical Knowledge

Solid experience administering and configuring Splunk platforms.
Advanced knowledge of SPL (Search Processing Language).
Experience in developing custom dashboards, reports, and use cases.
Knowledge of SIEM, SOAR, and threat detection solutions.
Experience with scripting and automation using Python, Bash, or PowerShell.
Knowledge of networks, Windows and Linux operating systems, as well as cybersecurity fundamentals.
Experience in integration with EDR, XDR, IAM, Cloud tools, and perimeter security technologies is valued.

Professional Competencies

Ability to lead technical initiatives and projects related to Splunk.
Orientation towards problem-solving and continuous improvement.
Autonomy, analytical capacity, and proactivity.
Ability to work in multidisciplinary environments and collaborate with different areas.
Excellent communication and technical documentation skills.

Additional Information

Environment and Flexibility

International, dynamic, and collaborative environment.
T-Social: social initiatives (sports, community, health, ...).
Hybrid work model (remote/on-site).
Flexible schedule.
4 weeks of remote work per year.

Professional Development

Tailored training: access to Coursera so you can learn what you want, when you want.
Weekly language classes (English, Spanish, and German).
Global Mentoring sessions and Experience Days.

Compensation and Benefits

Flexible compensation plan (health insurance, restaurant vouchers, childcare, transport).
Telemedicine.
Life and accident insurance.
Social fund.

Well-being and Free Time

More than 26 working days of vacation per year.
Free access to specialists (health, wellness, and legal advice).
100% of salary in case of medical leave.

And many more advantages of being part of T-Systems!

If you are looking for a new challenge, feel free to send us your CV. Join our team!

T-Systems Iberia will only process CVs of applications that meet the requirements specified for each offer.

Videos To Watch

View original advert (Spanish)

Descripción de la empresa

T-Systems es parte del grupo Deutsche Telekom, con unos 30.000 empleados en todo el mundo. Creamos tecnología con propósito para generar un impacto positivo en la sociedad. Buscamos talento curioso, con ganas de aprender, asumir retos y aportar ideas que transformen la experiencia de nuestros clientes.

Confiamos en las personas: ofrecemos autonomía, apoyo continuo y un entorno colaborativo donde crecer sin límites. Somos un solo equipo global, guiados por el respeto, la integridad y la pasión por hacerlo mejor cada día.

Descripción del empleo

Estamos buscando incorporar al equipo del SOC un/a especialista en Splunk, con una actitud dinámica, autonomía y ganas de aprender para afrontar retos complejos. El objetivo principal de este rol será liderar la configuración, administración y optimización de la plataforma Splunk, garantizando su integración eficiente dentro de nuestra infraestructura de seguridad y su capacidad para abordar las necesidades específicas de nuestros clientes.

Responsabilidades Clave:

Implementación y administración avanzada de la plataforma Splunk (Splunk Enterprise, Splunk Cloud, Splunk SOAR).
Desarrollo de dashboards, informes y alertas personalizadas para la monitorización y análisis de seguridad.
Diseño, implementación y optimización de arquitecturas Splunk para grandes entornos.
Integración de nuevas fuentes de datos en Splunk, incluyendo logs de sistemas, aplicaciones y dispositivos de red.
Automatización de procesos dentro de Splunk mediante Splunk Apps, Python y herramientas relacionadas.
Supervisión del rendimiento de Splunk y planificación de capacidades para garantizar un funcionamiento óptimo.
Coordinación con equipos de SOC para maximizar la eficacia del análisis de eventos en Splunk.
Soporte técnico de alto nivel relacionado con Splunk, incluyendo resolución de problemas complejos.
Creación de documentación técnica y mejores prácticas para el uso de Splunk.
Participación en el diseño e implementación de soluciones de seguridad basadas en Splunk, incluyendo SOAR y casos de uso avanzados.
Formación y soporte técnico al equipo en el uso avanzado de Splunk.

Requisitos

Educación y Experiencia:

Formación relacionada con Administración de Sistemas, Ingeniería de Sistemas, Telecomunicaciones o áreas relacionadas.
Experiencia mínima de 3 años administrando, personalizando y optimizando entornos Splunk.
Nivel de inglés B2 o superior.

Certificaciones requeridas o altamente valoradas:

Splunk Certified Admin.
Splunk Certified Architect.
Splunk Certified Developer.

Conocimientos técnicos

Experiencia sólida administrando y configurando plataformas Splunk.
Conocimiento avanzado de SPL (Search Processing Language).
Experiencia en desarrollo de dashboards, informes y casos de uso personalizados.
Conocimientos de soluciones SIEM, SOAR y detección de amenazas.
Experiencia con scripting y automatización utilizando Python, Bash o PowerShell.
Conocimientos de redes, sistemas operativos Windows y Linux, así como fundamentos de ciberseguridad.
Valorable experiencia en integración con herramientas EDR, XDR, IAM, Cloud y tecnologías de seguridad perimetral.

Competencias profesionales

Capacidad para liderar iniciativas técnicas y proyectos relacionados con Splunk.
Orientación a la resolución de problemas y mejora continua.
Autonomía, capacidad analítica y proactividad.
Habilidad para trabajar en entornos multidisciplinares y colaborar con diferentes áreas.
Excelentes capacidades de comunicación y documentación técnica.

Información adicional

Entorno y flexibilidad

Ambiente internacional, dinámico y colaborativo.
T-Social: iniciativas de carácter social (deportivas, comunitarias, de salud, ...).
Modelo de trabajo híbrido (teletrabajo/presencial).
Horario flexible.
4 semanas de teletrabajo al año.

Desarrollo profesional

Formación a tu medida: acceso a Coursera para que aprendas lo que quieras, cuando quieras.
Clases semanales de idiomas (inglés, español y alemán).
Sesiones de Mentoría a nivel global y Experience Days.

Compensación y beneficios