Overview
Senior Mss Engineer_Splunk Jobs in Abu Dhabi, UAE/Dubai at CyberGate Defense
Responsibilities
- Configure Indexers, Search Heads, Forwarders
- Create data inputs (syslog, API, cloud integrations)
- Index creation and retention policy configuration
- Field extraction, source type validation, and parsing
- Create correlation searches in ES (Enterprise Security)
- Implement Risk-Based Alerting (RBA)
- Fine‑tune alerts to reduce false positives
- Conduct use case gap analysis
- Troubleshoot parsing, indexing, and timestamp issues
- Monitor ingestion delays and indexing queues
- Optimize search performance
- Perform Splunk upgrades and app updates
- Backup configurations and validate restore
- Performance tuning and resource optimization
- Dashboard creation and SOC visibility enhancements
- Alert lifecycle improvements
- Support threat hunting queries
Deployment & Architecture
- Deploy Splunk Enterprise / Distributed Architecture
- Configure Indexers, Search Heads, Forwarders
- Implement clustering (Indexer / SH Cluster)
2 Log Source Onboarding
- Configure Universal Forwarders & Heavy Forwarders
- Create data inputs (syslog, API, cloud integrations)
- Index creation and retention policy configuration
- Field extraction, source type validation, and parsing
3 Detection & Use Case Engineering
- Develop SPL-based detection queries
- Create correlation searches in ES (Enterprise Security)
- Implement Risk-Based Alerting (RBA)
- Fine‑tune alerts to reduce false positives
- Conduct use case gap analysis
4 Log Validation & Troubleshooting
- Validate ingestion pipeline (Forwarder → Indexer → Search Head)
- Troubleshoot parsing, indexing, and timestamp issues
- Monitor ingestion delays and indexing queues
- Optimize search performance
5 Platform Maintenance
- Monitor license utilization (Daily indexing volume)
- Perform Splunk upgrades and app updates
- Backup configurations and validate restore
- Performance tuning and resource optimization
6 MSS & SOC Support
- Dashboard creation and SOC visibility enhancements
- Alert lifecycle improvements
Support threat hunting queries
Continuous detection improvement aligned with MITRE.
#J-18808-Ljbffr
Title: Senior Mss Engineer_Splunk
Company: CyberGate Defense
Location: Abu Dhabi, UAE/Dubai
Category: