Splunk Engineer, Sydney

About Dipole Group
We are a wholly Australian owned and operated ICT and Telecom networks specialist delivery business. Dipole operates locally, regionally, and internationally. Our capabilities span across Telecommunications, Finance, Insurance, health, Public Services, Print / Digital Media, Broadcast and Supply Chain.
Dipole Group is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

The Role
The Splunk Engineer will be responsible for maintaining the overall Splunk architecture and the effectiveness and efficiency of the SIEM. This includes proficiency in managing search heads, indexers, deployment servers and heavy forwarders. A strong understanding of Enterprise Security and SOAR is required.

Key Responsibilities Include:
• Manage Splunk and Splunk ES application updates, dashboarding, integrations and health checks.
• Onboard new data/log sources and run queries and searches to inform requests.
• Perform data quality and data model assessments on a periodic basis
• Maintain Heavy Forwarding logging infrastructure.
• Maintain existing on premise Splunk Enterprise and SOAR - including patching, application updates integrations and health checks
• Assist in playbook and automation maintenance also Use Case development
• Investigate technologies to assist with vulnerability analysis and remediation efforts
• Stay up-to-date with the latest security threats, vulnerabilities, and trends.


Mandatory Skills:


• Relevant certifications such as Splunk Core. Architect, ES and SOAR are preferred.
• 2+Years of experience in cybersecurity knowledge of common cybersecurity threats, and attack vectors.
• Proficient in Splunk ES data models and Splunk query language.
• Experience user of Git/ GitHub, Docker, AWS and Azure
• Ability to work in a fast-paced , high- pressure environment. Strong problem-solving and analytical skills. Excellent written and verbal communication skills.
• The splunk engineer will have a good understanding of ITIL processes and tools.
• Experience administering and/or develping for an enterprise level implementation of Splunk (clustered architecture).

Next Steps
If you are passionate about Splunk and have the necessary skills and experience, please click on the APPLY button now. Due to the high number of applicants, only shortlisted candidates will be contacted for further discussion within 3-5 business days. We thank you for taking an interest in this opportunity with us.
Job Type: Full-time, Permanent
Salary: 80,000 - 100,000 AUD per annum plus Superannuation.