Overview
Senior MSS Engineer; Splunk Jobs in Abu Dhabi, UAE/Dubai at CYBER GATE DEFENSE L.L.C.
Position: Senior MSS Engineer(Splunk)
Deployment Architecture
- Deploy Splunk Enterprise in a distributed architecture
- Configure indexers, search heads and forwarders
- Implement clustering for Indexer and SH Cluster
Log Source Onboarding
- Configure Universal Forwarders
- Configure Heavy Forwarders
- Create data inputs for syslog, API, and cloud integrations
- Set up index creation and retention policy configuration
- Perform field extraction, source type validation, and parsing
Detection Use Case Engineering
- Develop SPL‑based detection queries
- Create correlation searches in ES
- Implement Risk‑Based Alerting (RBA)
- Fine‑tune alerts to reduce false positives
- Conduct use‑case gap analysis
Log Validation Troubleshooting
- Validate the ingestion pipeline for Forwarder, Indexer and Search Head
- Troubleshoot parsing, indexing and timestamp issues
- Monitor ingestion delays and indexing queues
- Optimize search performance
Platform Maintenance
- Monitor license utilization and daily indexing volume
- Perform Splunk upgrades and app updates
- Backup configurations and validate restore processes
- Conduct performance tuning and resource optimization
MSS SOC Support
- Create dashboards and enhance SOC visibility
- Improve alert lifecycle management
- Support threat hunting queries
- Continuously improve detection aligned with MITRE objectives
Qualifications
- Bachelor’s degree in Computer Science, Information Security or a related field (Master’s preferred)
- Minimum 5+ years of hands‑on experience engineering and administering Splunk in a SIEM context
- Proven expertise in Splunk Enterprise Security (ES), including common information model (CIM) compliance and app development
- Deep understanding of cybersecurity principles, threat landscapes, and incident response methodologies
#J-18808-Ljbffr
Title: Senior MSS Engineer; Splunk
Company: CYBER GATE DEFENSE L.L.C.
Location: Abu Dhabi, UAE/Dubai
Category: