Security Automation Leader(Splunk/Python)

As a Security Automation Leader, you will play acritical role in enhancing our cybersecurity posture through automation, data analytics, intelligent tooling, and cloud security engineering As a Security Automation Leader, you will play a critical role in enhancing our cybersecurity posture through automation, data analytics, intelligent tooling, and cloud security engineering. Design, implement, and maintain distributed and clustered Splunk environments, ensuring seamless integration with infrastructure, security, and application platforms. Drive security automation initiatives using Splunk, Python, APIs, dashboards, and AI-powered tools such as Copilot to improve operational efficiency. Develop and maintain dashboards, alerts, reports, and automation workflows to support security monitoring, vulnerability management, and operational processes. Optimize data ingestion, search performance, and platform availability to ensure a scalable and resilient Splunk environment. Administer Splunk access controls, application deployments, upgrades, and platform configurations in accordance with security and compliance requirements. Troubleshoot complex technical issues, perform root cause analysis, and document findings to support continuous improvement and knowledge sharing. Support security engineering activities across AWS, Azure, Microsoft 365, and OpenShift Container Platform (OCP), including security monitoring, vulnerability management, and compliance initiatives. Develop integrations between cloud security services, SIEM platforms, and security tooling to enhance visibility, automation, and operational effectiveness. Collaborate with infrastructure, platform, and application teams to implement security controls and security-by-design practices across cloud and containerized environments. Education: Bachelor’s degree in computer science or related field. Certifications (preferred but not explicitly listed): Splunk Certified Power User / Admin / Architect Coding development using Python and similar AWS, Azure, Microsoft 365, or Kubernetes/OpenShift security certifications Essential: You must be well versed with Splunk SPL, Linux commands and python scripting Design, deployment, and maintenance of distributed/clustered Splunk environments Management of search heads, indexers, forwarders Data ingestion: configuring inputs, indexes, source types Content creation: dashboards, reports, alerts Access control: user roles, authentication Application management: installing/upgrading custom and Splunk base apps Scripting & Troubleshooting Linux command-line skills Python scripting for automation and troubleshooting Log analysis and issue reproduction Bug reporting and vendor escalation You must be the experienced developer, with good experience in system integration/interfacing. Depending on the project, your duties may include coding, scripting, building new systems (where necessary) and interfaces. For new system build-up, you may need to environment support during SIT/UAT. You are expected to ensure your work are adequately documented and transferred to the production team post-cutover. You will be expected to work with the senior developers and system architect in formulating technical solutions that is fit for purpose for your assigned projects. The solution will need to satisfy all security, regulatory and architectural standards. You should possess hands-on experience with cloud security technologies across AWS, Azure, Microsoft 365, and OpenShift/Kubernetes environments, including security monitoring, vulnerability management, cloud security posture management, and security tool integration