Managed Services Consultant

About the Role

FNRCO is seeking a Managed Services Consultant with substantial hands-on experience in Splunk Enterprise administration, SIEM content development, Splunk Enterprise Security (ES), and Splunk User Behavior Analytics (UBA). This full-time position is based in Jeddah, Makkah, Saudi Arabia, and requires 5-10 years of relevant experience.

Key Responsibilities

• Administer Splunk Enterprise, covering deployment, user management, licensing, upgrades, patches, configuration, change management, reporting, backup, and recovery.
• Onboard, monitor, and troubleshoot log sources to ensure continuous log ingestion.
• Develop and maintain security use cases, correlation rules, dashboards, alerts, reports, report templates, and SPL queries using Splunk Enterprise Security.
• Review existing Splunk configurations and recommend enhancements.
• Manage SIEM support tickets and resolve log-source ingestion issues.
• Develop custom parsing rules for non-standard logs.
• Configure threat feeds, Indicators of Compromise (IoCs), Sigma rules, and security advisories.
• Support regulatory audits in Saudi Arabia and provide required evidence from the SIEM solution.
• Administer Splunk UBA, including ingestion of CIM-compliant data, raw events, and HR data from the Splunk platform.
• Monitor Splunk UBA health using the UBA Monitoring App and manage backups and failover procedures.

Required Qualifications and Experience

• Minimum of 5 years of relevant Splunk/SIEM experience.
• Strong expertise in Splunk Enterprise administration.
• Hands-on experience with Splunk Enterprise Security and SIEM use-case development.
• Experience in Splunk UBA administration, monitoring, and troubleshooting.

Required Skills

• Knowledge of log onboarding, parsing, SPL queries, and correlation searches.
• Understanding of threat intelligence and security compliance requirements.

Work Location

This full-time position is located in Jeddah, Makkah, Saudi Arabia.