Administrateur(trice) SPLUNK - Défense & Sécurité - Ile-de-France
Core
Administration, supervision, and optimization of a critical Splunk SIEM platform handling massive data volumes (>10 TB/day) within a cybersecurity operations center (SOC).
Role type
Senior Splunk Administrator / SIEM Engineer
Builds
Production SIEM dashboards, security alerts, and optimized data pipelines for a SOC
Domain
Cybersecurity / SIEM / Big Data
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
Splunk Enterprise administration, Splunk Enterprise Security (ES), distributed cluster architecture, data ingestion optimization, Linux system administration, automation scripting (Bash/Python), incident resolution (N2/N3)
Preferred skills
Containerization (Docker/Kubernetes), VMware/Nutanix virtualization, TCP/IP networking, data normalization, security compliance
Technologies
Splunk Enterprise, Splunk ES, Linux, VMware, Nutanix, GitLab, Ansible, Bash, Python, Docker, Kubernetes
Responsibilities
Administer and optimize Splunk platform performance and data quality, ensure availability and security of environments, resolve complex incidents, industrialize operations via automation, support business teams in platform usage, contribute to platform evolution projects
Seniority
Senior, hands-on IC