Essential requirements:

• 2–5+ years of hands-on experience in Splunk dashboard development (SPL, dashboards, data models, tokens, drilldowns, performance tuning).

• Solid understanding of log collection from network/security components (e.g., firewalls) and SIEM/SOAR environments.
• Experience with data modeling, normalization (e.g., CIM), field extraction, and source integration.
• Familiarity with CMDB systems (ServiceNow or similar): data sources, ownership, CI relationships, and data quality.
• Ability to design KPIs/KRIs from controls and OKRs.
• Strong SPL/SQL logic and visualization best practices (metric design, color coding, alert thresholds, storytelling flow).
• Professional-level English; Swedish is a plus.

Meritorious

• Experience with ServiceNow (CMDB, Discovery, ITOM, Reporting) and integration with Splunk.
• Knowledge of security frameworks: NIST CSF, ISO 27001, CIS Controls, MITRE ATT&CK, and risk/OKR governance.
• Scripting/ETL skills (e.g., Python, shell) for data transformation and automation.
• Data quality management (DQ rules, coverage metrics, lineage, data cataloging).
• Splunk performance optimization (accelerated data models, summary indexing, quotas, retention).
• Executive dashboard design and metric standardization across multiple business divisions.

Please explain how you meet all the requirements when applying.

Utilization: 100%
Location: Malmö
Period:  01-12-2025-30-04-2026
Last day to apply: 06-11-2025
We present regularly. This means that we sometimes remove the assignements from our website before the final application deadline. If you are interested in an assignement, we recommend that you submit your application as soon as possible.