Job Description

Senior Splunk Detection Engineer | 12 Month Contract n

Pathway Search – Sydney Western Suburbs NSW

n

A major infrastructure organisation in Western Sydney is seeking a Senior Splunk Detection Engineer for a 12 month contract. You will lead an uplift of its Splunk security monitoring and detection capability across enterprise, cloud and operational technology (OT) environments.

Essential technical skills n

n
- Splunk Enterprise administration, including data onboarding, indexing and search optimisation
n
- Advanced Search Processing Language (SPL) for searches, dashboards, reports and security detections
n
- Hands‑on ES configuration, tuning and operational support
n
- Creating, tuning and maintaining correlation searches that find real threats while minimising false positives
n
- Implementing and managing Risk‑Based Alerting (RBA) methodologies
n
- ES content management across detection rules, notable event management, security use cases and content lifecycle
n

n

A major infrastructure organisation in Western Sydney is seeking a Senior Splunk Detection Engineer for a 12 month contract. You will lead an uplift of its Splunk security monitoring and detection capability across enterprise, cloud and operational technology (OT) environments.

Essential technical skills n

n
- Splunk Enterprise administration, including data onboarding, indexing and search optimisation
n
- Advanced Search Processing Language (SPL) for searches, dashboards, reports and security detections
n





Splunk Enterprise Security nn
- Hands‑on ES configuration, tuning and operational support
n
- Creating, tuning and maintaining correlation searches that find real threats while minimising false positives
n
- Implementing and managing Risk‑Based Alerting (RBA) methodologies
n
- ES content management across detection rules, notable event management, security use cases and content lifecycle
n

Data and normalisation nn
- Solid Common Information Model (CIM) mapping to support data normalisation and effective security content
n
- Designing, maintaining and optimising Splunk data models, including data model acceleration
n

Detection and threat analysis nn
- Threat hunting using threat intelligence, behavioural analytics and hypothesis‑driven methods
n
- Threat modelling to identify threats, attack paths, vulnerabilities and mitigations
n
- Practical use of MITRE ATT&CK; for threat mapping, adversary behaviour analysis, detection development and control validation
n

Network and OT security nn
- Network security fundamentals: TCP/IP, firewall technologies, network segmentation, intrusion detection and traffic analysis
n
- Experience with SCADA environments and supporting technologies
n
- Understanding of Industrial Control System (ICS) security principles, threats, vulnerabilities and protective controls
n
- Knowledge of OT monitoring technologies, processes and use cases for detecting malicious or anomalous activity
n

#J-18808-Ljbffr

📌 Senior Splunk Detection Engineer | 12 Month Contract (Sydney)
🏢 Pathway Search
📍 Sydney