SIEM Splunk Administrator

• Training related to Systems Administration, Systems Engineering, Telecommunications, or related fields.
• Minimum of 3 years of experience administering, customizing, and optimizing Splunk environments.
• English level B2 or higher.
• Solid experience administering and configuring Splunk platforms.
• Advanced knowledge of SPL (Search Processing Language).
• Experience developing dashboards, reports, and custom use cases.
• Knowledge of SIEM, SOAR, and threat detection solutions.
• Experience with scripting and automation using Python, Bash, or PowerShell.
• Knowledge of networks, Windows and Linux operating systems, as well as cybersecurity fundamentals.
• Ability to lead technical initiatives and projects related to Splunk.
• Problem-solving orientation and continuous improvement mindset.
• Autonomy, analytical skills, and proactivity.
• Ability to work in multidisciplinary environments and collaborate with different areas.
• Excellent communication and technical documentation skills.

• Splunk Certified Admin.
• Splunk Certified Architect.
• Splunk Certified Developer.
• Valuable experience integrating with EDR, XDR, IAM, Cloud, and perimeter security technologies.

• Training tailored to you: access to Coursera to learn what you want, when you want.
• Weekly language classes (English, Spanish, and German).
• Global Mentoring sessions and Experience Days.
• Flexible compensation plan (health insurance, restaurant tickets, childcare, transportation).
• Telemedicine.
• Life and accident insurance.
• Social fund.

We are looking to add a Splunk specialist to our SOC team, with a dynamic attitude, autonomy, and a willingness to learn to tackle complex challenges. The main objective of this role will be to lead the configuration, administration, and optimization of the Splunk platform, ensuring its efficient integration within our security infrastructure and its ability to address our clients' specific needs.

• Advanced implementation and administration of the Splunk platform (Splunk Enterprise, Splunk Cloud, Splunk SOAR).
• Development of custom dashboards, reports, and alerts for security monitoring and analysis.
• Design, implementation, and optimization of Splunk architectures for large environments.
• Integration of new data sources into Splunk, including logs from systems, applications, and network devices.
• Automation of processes within Splunk using Splunk Apps, Python, and related tools.
• Monitoring Splunk performance and capacity planning to ensure optimal operation.
• Coordination with SOC teams to maximize the effectiveness of event analysis in Splunk.
• High-level technical support related to Splunk, including troubleshooting complex issues.
• Creation of technical documentation and best practices for Splunk usage.
• Participation in the design and implementation of Splunk-based security solutions, including SOAR and advanced use cases.
• Training and technical support for the team in advanced Splunk usage.

• International, collaborative, and dynamic environment.
• T-Social: social initiatives (sports, community, health, etc.).
• Hybrid work model (remote/on-site).
• Flexible schedule.
• 4 weeks of remote work per year.