This role requires a Principal Technical Specialist to lead the development and enhancement of the enterprise Splunk platform within the Cyber Security Program. You will be responsible for the hands-on development of SIEM content, creating complex queries and dashboards to provide vital operational intelligence for projects and services.

The role:

- Lead end-to-end Splunk integration with a wide range of cybersecurity technologies including endpoint and gateway's security domains.
- Develop advanced Splunk queries, dashboards, and visualisations to deliver high-value operational and threat intelligence.
- Translate security, compliance, and operational requirements into effective SIEM use cases, alerts, and automated reporting.
- Collaborate with cyber security teams to onboard high-quality log and telemetry data into Splunk for real-time and historical analysis.
- Provide expert advice on Splunk usage, performance tuning, and platform administration to internal project and operational teams.
- Present complex data insights and trends to both technical and non-technical stakeholders, including senior leadership.
- Maintain explicit, up-to-date technical documentation for Splunk content and integrations to support team scalability and supportability.
- Correlate data across multiple systems and tools to provide a cohesive view of Queensland Health's cyber security posture.





Is this the opportunity for you? To be successful in this role you will be a technical Splunk specialist who enjoys working collaboratively within a team. You will have a solid understanding of enterprise systems and a demonstrated ability to configure and document them according to best practice.

We are looking for someone with the following skills and experience:

- Splunk Skills: Demonstrated experience using Splunk through integration with other systems to create advanced queries, reports, and dashboards to analyse security data and provide operational intelligence. (SFIA: DAIM 5; METL 5)
- Team Contribution: The ability to work collaboratively as a senior technical member within a security program, contributing your specialist skills to achieve collective goals and enhance the team's capabilities. (SFIA: COLM 5; RLMT 5)
- Analytical Skills: Well-developed analytical and problem-solving skills, with the ability to investigate and resolve complex technical issues on security platforms. (SFIA: PBMG 5; INAS 5)
- Communication & Stakeholder Engagement: Good communication and interpersonal skills, allowing you to consult effectively with technical stakeholders, maintain positive working relationships, and explain concepts clearly. (SFIA: CNSL 5; RLMT 5)

📌 Principal Technical Specialist - Splunk (Brisbane)
🏢 Queensland Health
📍 Brisbane