Senior Splunk Consultant – Focus on Cyber Defense

Security

Senior Splunk Consultant – Focus on Cyber Defense

Security
Puławska 2, Warszawa

Square One

Full-time
B2B
Senior
Remote
44 - 47 USD
Net per hour - B2B

Job description

We are looking for an experienced Senior Splunk Consultant to join a strategic cybersecurity initiative. The role focuses on designing, implementing, and maintaining advanced Splunk environments to support cyber defense operations. The consultant will work on multi-site and distributed clusters, integrate new data sources, and develop solutions that enhance the organization’s security monitoring capabilities.


Responsibilities:

  • Develop correlation searches for security use cases in Splunk Enterprise Security.

  • Onboard new data sources to the Splunk platform according to business requirements.

  • Work with Multi-Site Cluster and Distributed Cluster environments.

  • Maintain clustered environments such as Indexer Clusters and Search Head Clusters.

  • Design and deploy complex Splunk environments, including multi-node deployments.

  • Develop custom applications and add-ons integrating Splunk with external systems.

  • Implement Splunk Forwarder installations and configurations across various application environments to collect data.

  • Design, build, support, and maintain high-availability Splunk platforms.

  • Perform Splunk platform management tasks, including installation, configuration, license management, data integration, field extraction, event analysis, dashboards, and application management.

  • Develop solutions using Ansible Playbooks for ad-hoc policy management within Splunk.


Requirements:

  • Minimum 5 years of relevant experience.

  • Splunk Enterprise Certified Architect.

  • Splunk Enterprise Security Certified Admin.

  • Proven experience with multi-site and distributed Splunk clusters.

  • Strong knowledge of Splunk deployment architecture and high-availability setups.

  • Experience creating custom Splunk applications and add-ons.

  • Proficiency in scripting and automation (e.g., Ansible, Shell, Python).

  • Strong analytical skills and experience in security use case implementation.


Contract Details:

  • Recruitment process: 2 interviews.

  • Initial contract: 1 year, with option for long-term extension.

  • Start date: January 2026.

  • Work type: Fully remote.

  • Rate: 160–170 PLN/h net + VAT (B2B).

Tech stack

    Splunk

    advanced

    Ansible

    regular

    Shell

    regular

    Python

    regular

Office location