Splunk SIEM Engineer - System Integrator

Join a global security consultancy supporting one of the world’s leading names in aerospace, defence, and cybersecurity. An experienced Splunk Engineer is needed in Luxembourg to support the expansion of a mission-critical SIEM capability for a major French multinational. Play a key role in building, optimizing, and maintaining a secure, scalable SIEM environment in a complex, enterprise-grade infrastructure.

Take the next step in your Splunk career. Apply now to deliver high-impact SIEM solutions for a global leader.

Key Responsibilities:

• Design, implement, and maintain Splunk architecture and infrastructure.
• Create and manage data ingestion pipelines, including parsing, indexing, and transformation.
• Develop custom dashboards, alerts, and correlation rules to support threat detection and operational visibility.
• Perform log analysis, troubleshooting, and optimisation of Splunk queries (SPL).
• Work closely with the SOC and cyber security teams to integrate new data sources and use cases.
• Ensure compliance with security standards and data governance policies.
• Support upgrades, patching, and performance tuning of the Splunk environment.

Key Skills & Experience Required:

• Proven hands-on experience with Splunk Enterprise and/or Splunk Cloud.
• Strong understanding of SIEM concepts, log management, and event correlation.
• Proficiency in SPL (Search Processing Language) for query creation and optimisation.
• Experience onboarding a variety of log sources (e.g., firewalls, endpoint, servers, cloud).
• Familiarity with security frameworks (e.g., MITRE ATT&CK, NIST) is a plus.

Language:

• Strong English and French speaking skills 

Location: 

• Onsite in Luxembourg (3 days/week)

Workload: 

• Full-time (with hybrid flexibility)

Start date: 

• ASAP

Contract length: 

• Initial 6 months contract

Day rate: 

• €575