HyperThink Systems
Website:
hyperthinksys.com
Job details:
🚀 We're Hiring: Splunk Security Infrastructure Engineer
📍 Location: Doha, Qatar
👨💻 Experience: 3–5 Years
📅 Duration: 12 Months (Extendable)
🏢 Company: HyperThink Systems W.L.L, Qatar
We are looking for a skilled Splunk Security Infrastructure Engineer to join the Security Operations (SecOps) team. The ideal candidate will be responsible for administering and optimizing Splunk Enterprise and Splunk Cloud environments, supporting SIEM operations, onboarding security data sources, developing detection content, and implementing security automation through Splunk SOAR.
🛠️ Key Skills
✨ Splunk Enterprise & Splunk Cloud Administration
✨ Splunk Enterprise Security (ES) & Risk-Based Alerting (RBA)
✨ Splunk SOAR (Phantom) Automation & Playbook Development
✨ SPL (Splunk Processing Language)
✨ Search Head & Indexer Cluster Management
✨ Universal & Heavy Forwarders
✨ Data Onboarding, CIM Normalization & Technology Add-ons (TAs)
✨ Python, Bash & Splunk REST API Integrations
✨ AWS CloudTrail, GuardDuty, Azure Activity Logs & GCP Log Ingestion
✨ MITRE ATT&CK, NIST Cybersecurity Framework & CIS Controls
📌 Key Responsibilities
🎯 Manage and optimize Splunk Enterprise / Splunk Cloud infrastructure
📊 Build correlation searches, dashboards, alerts, and security content
⚙️ Configure Splunk ES Notable Events and threat intelligence integrations
🔄 Develop SOAR playbooks and automate incident response workflows
🛡️ Implement RBAC, LDAP, SAML and MFA integrations
☁️ Onboard and normalize logs from cloud, endpoint, network and SaaS platforms
🤝 Collaborate with SOC Analysts, Threat Hunters and Infrastructure Teams
✅ Requirements
💡 3–5 years of hands-on experience in Splunk Administration, SIEM Engineering or Security Operations
💡 Strong expertise in Splunk ES, SPL, Data Onboarding and Detection Engineering
💡 Experience with Search Head Clusters, Indexer Clusters and Forwarder Management
💡 Hands-on experience with Splunk SOAR / Phantom and security automation
💡 Strong Python and Bash scripting skills
💡 Knowledge of TCP/IP, Firewalls, IDS/IPS and Endpoint Security
🎓 Certifications
✔️ Splunk Core Certified Power User (Required)
✔️ Splunk Enterprise Certified Admin (Required)
➕ Splunk Enterprise Security Certified Admin (Preferred)
➕ Splunk SOAR Certified Automation Developer (Preferred)
➕ Security+, CySA+, CEH, CISSP or GCIH
📧 How To Apply
Share your updated CV along with Current Salary, Expected Salary and Notice Period to:
📩 saikumar@hyperthinksys.com
#Splunk #SplunkEngineer #SplunkAdministrator #SIEM #SOAR #SOC #CyberSecurity #SecurityOperations #DetectionEngineering #ThreatIntelligence #QatarJobs #DohaJobs #MiddleEastJobs #Hiring
Click on Apply to know more.