Splunk Engineer - Cybersecurity Operation Centre

About the role

EY Technology Consulting is looking for a Splunk Engineer to join its cybersecurity and observability team. The role covers AWS environments, endpoint security, threat detection and automated response, delivering advanced SOC and observability capabilities in a 24x7 operational environment.

Key responsibilities

• Own and execute Splunk migration projects from on-premises to Splunk Cloud (SaaS)
• Design, implement and maintain Splunk security and observability use cases, dashboards, reports and alerts for SOC, threat hunting and IT operations
• Integrate Splunk with SentinelOne (Singularity Platform) and Cisco XDR/SOAR for EDR/XDR telemetry and automated response
• Develop correlation searches, risk-based alerting and ES notable events, and custom parsers, lookups and normalisation
• Ingest AWS security logs (CloudTrail, GuardDuty, VPC Flow Logs, ELB/ALB, CloudWatch, Security Hub) into Splunk
• Build SOAR/XDR playbooks and collaborate with SOC, IR and IT teams to close detection gaps
• Enable L1/L2 SOC analysts and maintain documentation such as runbooks and SOPs

Required profile

• Bachelor's degree in Computer Science, Information Security or a related field, or equivalent experience
• 3-5 years of experience in Splunk administration, security engineering or SOC analytics
• Proven experience with Splunk Cloud migrations, large-scale deployments and SentinelOne integration with SIEM/SOAR
• Experience creating security use cases, SOAR/XDR playbooks and exposure to threat hunting, incident response and MITRE ATT&CK

Required skills

• Splunk Enterprise and Cloud, including SPL, dashboards, alerts and knowledge objects
• SentinelOne EDR/XDR and Cisco XDR/SOAR
• Wazuh, UEBA and AI/ML-driven analytics
• AWS security logs and Splunk Enterprise Security
• Cisco security ecosystem (Umbrella, Secure Firewall, Secure Endpoint, SecureX)
• Splunk certifications (Core, ES, Cloud Admin) and SentinelOne or XDR certifications are a strong plus

What we offer

• Competitive remuneration linked to individual and team performance
• Flexible working arrangements and support for career development
• Coaching, feedback and opportunities to develop new skills