SIEM Platform Engineer (f/m/d) @ A1 Competence Delivery Center
Core
Engineering, maintaining, and improving an enterprise Splunk SIEM platform to support security operations.
Role type
Senior IC SIEM Platform Engineer
Builds
Reliable, scalable, and high-quality SIEM foundation for security operations
Domain
Cybersecurity / SIEM / Log Management
Required skills
Splunk Enterprise administration, Log ingestion optimization, TAs/props/transforms development, CIM compliance, Linux, Networking fundamentals, Python scripting, Cloud environments (Azure/M365)
Preferred skills
Splunk certifications (Admin, Architect, Core, ES Analyst), German language skills
Technologies
Splunk Enterprise, Python, Bash, Ansible, Azure, M365
Responsibilities
Maintain and improve Splunk Enterprise components (Search Heads, Indexers, Cluster Masters, Deployment Servers), Manage and optimize heavy and universal forwarders, Onboard new data sources across cloud, on-prem, and hybrid environments, Develop and maintain TAs, props/transforms, field extractions, and parsing logic, Ensure CIM-compliant data models and well-structured logs, Support troubleshooting across ingestion, parsing, indexing, search performance, and configuration issues, Handle platform upgrades, scaling activities, and architecture enhancements, Automate deployments, maintenance tasks, and data onboarding workflows, Build scripts and tools that improve the platform's efficiency, Support SOAR automation pipelines
Seniority
Senior, hands-on IC
