Managed Services Consultant

Job description

About the Role: the employer seeks a Managed Services Consultant with extensive hands‑on experience in Splunk Enterprise administration, SIEM content development, Splunk Enterprise Security (ES) and Splunk User Behavior Analytics (UBA). Responsibilities: Administer Splunk Enterprise covering deployment, user management, licensing, upgrades, patches, configuration, change management, reporting, backup and recovery. Onboard, monitor and troubleshoot log sources to ensure continuous ingestion. Develop and maintain security use cases, correlation rules, dashboards, alerts, reports, report templates and SPL queries using Splunk Enterprise Security. Review existing Splunk configurations and recommend enhancements. Manage SIEM support tickets and resolve log‑source ingestion issues. Create custom parsing rules for non‑standard logs. Configure threat feeds, Indicators of Compromise (IoCs), Sigma rules and security advisories. Support regulatory audits in Saudi Arabia and provide required evidence from the SIEM solution. Administer Splunk UBA including ingestion of CIM‑compliant data, raw events and HR data from the Splunk platform. Monitor Splunk UBA health using the UBA Monitoring App and manage backups and failover procedures

Requirements

• Minimum 5 years of relevant Splunk/SIEM experience
• proficiency in Splunk Enterprise administration
• hands‑on experience with Splunk Enterprise Security and SIEM use‑case development
• knowledge of Splunk UBA administration, monitoring and troubleshooting
• knowledge of log onboarding, parsing, SPL queries and correlation searches
• understanding of threat intelligence and security compliance requirements

Skills