Principal Technical Specialist - Splunk

Join our Cyber Security Program to lead the development of our enterprise Splunk Security Information and Event Management (SIEM) platform. In this hands-on technical specialist role, you will design and build integrations of cyber solutions for endpoint and gateways security and, transforming the logs and data into actionable security insights.

This role requires a Principal Technical Specialist to lead the development and enhancement of the enterprise Splunk platform within the Cyber Security Program. You will be responsible for the hands-on development of SIEM content, creating complex queries and dashboards to provide vital operational intelligence for projects and services.

The role:

• Lead end-to-end Splunk integration with a wide range of cybersecurity technologies including endpoint and gateway's security domains.
• Develop advanced Splunk queries, dashboards, and visualisations to deliver high-value operational and threat intelligence.
• Translate security, compliance, and operational requirements into effective SIEM use cases, alerts, and automated reporting.
• Collaborate with cyber security teams to onboard high-quality log and telemetry data into Splunk for real-time and historical analysis.
• Provide expert advice on Splunk usage, performance tuning, and platform administration to internal project and operational teams.
• Present complex data insights and trends to both technical and non-technical stakeholders, including senior leadership.
• Maintain clear, up-to-date technical documentation for Splunk content and integrations to support team scalability and supportability.
• Correlate data across multiple systems and tools to provide a cohesive view of Queensland Health's cyber security posture.

Is this the opportunity for you?

To be successful in this role you will be a technical Splunk specialist who enjoys working collaboratively within a team. You will have a solid understanding of enterprise systems and a demonstrated ability to configure and document them according to best practice.

We are looking for someone with the following skills and experience:

• Splunk Skills: Demonstrated experience using Splunk through integration with other systems to create advanced queries, reports, and dashboards to analyse security data and provide operational intelligence. (SFIA: DAIM 5; METL 5)
• Team Contribution: The ability to work collaboratively as a senior technical member within a security program, contributing your specialist skills to achieve collective goals and enhance the team's capabilities. (SFIA: COLM 5; RLMT 5)
• Analytical Skills: Well-developed analytical and problem-solving skills, with the ability to investigate and resolve complex technical issues on security platforms. (SFIA: PBMG 5; INAS 5)
• Communication & Stakeholder Engagement: Good communication and interpersonal skills, allowing you to consult effectively with technical stakeholders, maintain positive working relationships, and explain concepts clearly. (SFIA: CNSL 5; RLMT 5)

About Cyber Security Program – eHealth Queensland:

eHealth Queensland is one of the largest Information Communication Technology operations in the state. It is responsible for ensuring the smooth operation of information systems and technologies so that Queensland Health employees and health providers have access to information that supports the delivery of health care.

Benefits of working with eHealth Queensland:

By joining eHealth Queensland, you will work within a fast-paced, challenging and supportive environment where every employee plays a critical role in our ongoing success. 

You will enjoy a variety of benefits, including:

• Competitive salary + generous superannuation and leave loading
• Flexible working arrangements
• Diverse work culture
• Career training and development

To apply for this exciting opportunity, submit your resume and a short statement (maximum 2 pages) on how your experience, abilities, knowledge and personal qualities are relevant for the role, taking into account the key responsibilities and attributes noted in the ‘How you will be assessed' section of the role description.