Splunk Engineer

NCIA is looking for a Splunk Engineer to manage, maintain, and further develop its SIEM and log-collection services.

Primary duties

• Serve as a principal engineer and Subject Matter Expert for SIEM and log-collection services.
• Manage, maintain, and further develop Splunk and related data-security systems.
• Advise stakeholders and provide technical contributions to relevant security projects.
• Maintain awareness of emerging SIEM, logging, and cybersecurity technologies.
• Install, configure, monitor, troubleshoot, and maintain security-system components.
• Ensure interoperability with dependent systems, applications, and external tools.
• Analyze system, security, and application logs to diagnose faults and identify abnormal behaviour.
• Monitor service performance and ensure compliance with SLAs and defined KPIs.
• Provide occasional on-call support to maintain SIEM infrastructure availability.
• Support the full service lifecycle according to ITIL practices, including:
• Service design and transition
• Operations and support
• Change management
• Continual service improvement
• Identify and propose improvements that increase system currency, stability, and reliability.
• Prepare business justifications, technical documentation, and implementation plans for the Change Management Board.
• Implement approved changes in coordination with relevant stakeholders.
• Coordinate with service delivery managers, users, NATO entities, and industry partners.
• Develop and maintain operating procedures, technical guidelines, service designs, and system documentation.
• Produce technical and executive reports, presentations, and briefings for audiences up to NATO executive level.