Senior Integration Engineer

About the role

The Senior Integration Engineer will work closely with project managers and cross‑functional teams to design, implement and document security integration use cases. The role focuses on managing Splunk SIEM, rsyslog forwarders and HEC data feeds while driving best‑practice processes and knowledge sharing across the organization.

Key responsibilities

• Define and document best‑practice techniques, templates, and architecture diagrams for security integrations.
• Administer and manage Splunk SIEM, Splunk Cloud, rsyslog forwarders, and HEC data feeds.
• Provide guidance on log structure, custom log ingestion, parser creation, validation and use‑case development.
• Educate stakeholders on reporting and dashboard capabilities to deliver value‑focused outcomes.
• Write, review and maintain knowledge‑base articles related to security integrations.
• Design, configure, integrate and deploy open‑source and commercial monitoring tools.
• Create custom parsers, dashboards and reports, and lead integration activities.

Required profile

• At least five years of security operational management experience, including a minimum of two years with Splunk SIEM.
• Splunk Admin and Splunk Cloud Admin certifications, with completed Splunk System Admin and Data Admin courses.
• Strong written and verbal communication skills.
• University degree and at least two cybersecurity certifications are preferred.

Required skills

• Splunk SIEM, Splunk Cloud, Splunk System Admin, Splunk Data Admin.
• rsyslog, HEC data feeds.
• Azure Security Centre.
• Scripting languages: PowerShell, Python, Node.js, Perl.
• Security certifications (e.g., CEH, CISSP, CCNP, MCSE).