Splunk Experts in Stuttgart
in minutes from over 15,000 CVs with AI-powered matchingHire experts who build Splunk searches, dashboards, alerts, and security or observability use cases with Splunk Enterprise, Splunk Cloud, and SPL. Get fast, precise matching with vetted, available freelancers.
Meet FRATCH Experts in Stuttgart, who have recently used Splunk
Dirk Peter
Last position:
Freelance Cyber Defense Lead & KRITIS/NIS2 Consultant | AI Security Architect at Self-Employed
Situation: Increasing demand for privacy-compliant AI solutions for clients in the KRITIS and mid-market sector that need to analyze sensitive media content (audio, video, documents) without sending data to public cloud LLMs.
Task: Design, deployment, and secure operation of a fully self-hosted AI infrastructure including a custom-built digital management platform for automated media analysis.
Action: Architected and implemented a multi-tier platform on hardened Proxmox infrastructure with frontend (Nuxt 3, Vue 3, TypeScript, Tailwind 4), backend (Laravel 13, PHP 8.4, Sanctum), data storage (PostgreSQL 16, MongoDB 7), caching/queuing (Redis 7, Laravel Queue), AI workers (Python 3.11, Whisper, DeepFace, Librosa), scheduling (Laravel Scheduler/Cron), and local LLMs (Gemma, DeepSeek, Qwen, Mistral, LLaMA, Phi) via OpenWebUI with segmented network access, API hardening, and audit logging following BSI recommendations.
Result: Fully GDPR-compliant, on-premises AI platform with zero data leakage to third parties.
Task: Overall responsibility as an external Head of Cyber Security / CISO-as-a-Service for the design, implementation, and continuous improvement of ISMS according to ISO 27001, BSI IT-Grundschutz, and NIS2.
Action: Built and managed Cyber Defense Centers (CDC) with SOC operations, integrated SIEM solutions (Splunk, Graylog), established risk-based vulnerability management (Qualys, Nessus, OpenVAS), and conducted regular infrastructure, application, and physical penetration tests.
Result: Audit-ready ISMS for multiple clients and a 60% reduction in critical vulnerabilities within 90 days.
Task: Design and execution of NIS2 assessments and operational roll-out plans for KRITIS operators.
Action: Developed an online assessment tool for automated identification of individual weakness profiles, implemented ISMS optimizations, penetration testing, awareness programs, GRC suite deployment, and delivered C-level presentations.
Result: Accelerated the consulting process by 50% and successfully prepared multiple clients for NIS2 compliance.
Task: Incident commander for crisis response, forensics, and business recovery in ransomware attacks and APT campaigns.
Action: Coordinated with state and federal police (LKA, BKA), performed forensic analysis (OSForensics, Wireshark, Kali Linux), executed disaster recovery and BCM strategies, and developed BTC extortion response strategies.
Result: 100% recovery rate within defined RTO windows and sustainable post-incident security architectures.
Action: Planned, built, and operated a hardened multi-VM infrastructure (Proxmox, 15+ VMs) with web and mail servers, Graylog, OPNsense firewalls, CRM/ERP and LLM instances, network segmentation, DDoS mitigation, automated patch management, and backup strategies.
Result: >99.5% uptime over 20+ years and zero compromises.
Action: Designed coordinated phishing campaigns with five levels of difficulty, developed e-trainings and webinars in a PDCA cycle, and led red and blue teams.
Result: Phishing click rate reduced from 35% to under 5% within three campaign cycles.
Salim Chehab
Last position:
Cloud / Systems Architect
- Development and introduction of operational processes
- Preparation of complete documentation packages (including emergency management and operations) to meet compliance requirements
- Introduction of a workshop on IaC (Infrastructure as Code)
- Professional consulting for the project's security concept (ISMS)
- Installation and operation of Kubernetes clusters on AWS, on-prem, and Azure
- Design of hybrid cloud architecture (on-prem, Hetzner, AWS)
- Analysis and resolution of incidents and system outages
- Network changes to firewall rules, gateways, OpenVPN settings, and IPsec tunnel (pfSense)
- Professional consulting on BitBucket, Jenkins, and GitLab CI/CD pipelines
- Consulting on Ansible deployments and infrastructure automation
- Consulting on building a scalable system in the cloud (AWS / Azure)
- Technologies / Tools: Ansible, Terraform, AWS, Azure, VPN, pfSense, Jenkins, Bitbucket, Kubernetes, GitLab Runner, ISMS, Golang, Prometheus, Grafana, S3, Lambda, RDS, ECS, Cognito, OIDC, Harbor, MinIO, Postgres, Redis, Keycloak, Ceph, Proxmox, CloudFormation, PostgreSQL, Flux CD, Hetzner, IONOS, Sonatype Nexus Repository, Entra ID, Dex IdP, Pulumi
Marko Oršolić
Last position:
System Administrator in a 6-person Team at FITS
- System administration of FreeBSD 11, 12 and 13.1 in a secure cloud software solution
- Administration of proxy servers for FITS and its clients, banks and state banks
- Administration of secure internet solutions
- Administration of secure mail solutions and mail gateways
- Administration of Apache 2.4 web servers
- Planning and maintenance of servers and network components in FNT Command
- Incident, change and ticket handling, especially troubleshooting network issues using Splunk and ARS
- Troubleshooting and log file analysis using Splunk Enterprise
- Monitoring with Nagios
- Ordering, provisioning and installation of certificates on Apache web servers, Nginx web servers and load balancers
- Hardware: HP ProLiant DL380 Gen 9 and 10, Cisco Catalyst
- Software: FreeBSD 11, 12 and 13.2, FNT Command, shell scripts, MySQL databases, ServiceNow, ARS, Splunk Enterprise 8.15
Achille Chimi
Last position:
Backend/Frontend Developer at ITZ-Bund
Development of a microservice application for calculating postings on accounts
Development of backend components with Java or JEE, Quarkus, Kafka, Rest API
Development of the test component with mocking frameworks (Mockito)
Development of integration test components
Creation of OpenAPI specification format
Configuration of CI/CD pipeline
Development of frontend components with React
Design, further development and optimization of system structures
Code review
Java Corretto 21, JEE, Quarkus, Golang
Reactive programming with Spring WebFlux, Project Reactor
Git, Azure DevOps for CI/CD pipeline, YAML, Json Swagger UI, Postman, Rest OpenAPI, Kafka Streams, Kafka Connect, Log4J
Microservices, Jira, Confluence, MySQL, Docker, Kubernetes (deployment via Helm charts)
Spring Security, OAuth 2, JWT, Sonarqube
IntelliJ, Maven, logging framework Splunk, Agile method Scrum, Nexus, Vaadin V24, build tool Vite
React, React.JS, Node.js, Jess/JavaScript, Tailwind CSS, Agile method Scrum, accessibility BITV, Playwright
Marcel Schmidt
Last position:
Technical Lead / Lead Developer at REWE digital
- Due to an organizational restructuring towards product-based teams, the implementation of a Data Mesh in the area of Digital Supplier Management (DSM) was decided.
- A highly available real-time Data Mesh for providing large volumes of data via Kafka and REST to other products.
- New development of a core supplier management software in a (micro-)service-based architecture with a modern tech stack.
- Technologies/Tools:
- Java 21
- Spring Boot
- Angular
- TypeScript
- Go
- MapR
- Kafka
- Docker
- Google Cloud Platform (GCP)
- Kubernetes
- Helm
- GitLab CI
- Maven
- JUnit
- Mockito
- WireMock
- Cypress
- Keycloak
- OAuth 2.0 & OpenID Connect
- Humio
- Nexus
- Artifactory
- SonarQube
- Renovate
- Git
- Postman
- IntelliJ
Ivan Greguric-Ortolan
Last position:
Technical Lead at Porsche Digital GmbH
- Contributed to the design of the new financial services integration layer and moderated the architectural discussions
- Oversaw the security concept and approval of the application
- Prepared infrastructure setup and best practices for the Kotlin backend
Discover over 15,000 top freelancers
Statistics of experts using Splunk
Aggregated from the professional profiles of matched freelancers.
Experience
18 years (Germany: 20 years)
Position duration
1.7 years (Germany: 2.1 years)
Positions per freelancer
16 (Germany: 14)
Top business areas
Information Technology, Product Development, Operations
Top industries
Automotive, Information Technology, Banking and Finance
Certification focus areas
Information Technology, Audit, Legal
Bachelor's degree or higher
100% (Germany: 90%)
Master's degree or higher
40% (Germany: 45%)
Certifications per freelancer
2 (Germany: 5)
Most common languages
German, English, Spanish
Speak two or more languages
100% (Germany: 98%)
Based on our profile pool as of 30 Aug 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Stuttgart are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Stuttgart using Splunk
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 30 Aug 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
About the technology
What Splunk does
Splunk turns machine data into searchable events, dashboards, and alerts. Companies use it to monitor systems, investigate incidents, and track security signals across servers, apps, networks, and cloud services.
Core skills
Strong specialists work confidently with SPL, field extractions, dashboards, alerts, and saved searches. They also know Splunk Enterprise and Splunk Cloud, plus data onboarding, sourcetype design, and index strategy.
Typical work
- Build searches and reports for operations and security teams
- Create dashboards for service health, logs, and business events
- Tune alerts to reduce noise and catch real issues
- Onboard new data sources and normalize event structure
- Support Splunk ES, ITSI, or other app-based setups
When to bring in freelancers
Freelance expertise helps when a team needs a clean rollout, faster search performance, or better detection logic. It is also useful for migrations, cleanup after years of ad hoc use, or support during a security review.
What strong specialists deliver
Good professionals write clear SPL, document their work, and understand how data flows from source to index to search. They think about scale, field quality, permissions, and how dashboards and alerts will be used day to day.
Stuttgart context
In Stuttgart, Splunk work often sits close to industrial IT, enterprise operations, and security monitoring. Teams may want on-site workshops for stakeholders and remote delivery for search tuning, dashboard work, or ongoing support. Typical cooperation is easier when the specialist can discuss requirements clearly in English and, when needed, work with local teams in German.
Frequently asked questions
Need clarity? These are the questions we hear most often about Splunk.
Splunk is used to collect, search, and visualize machine data such as logs, metrics, and security events. Companies rely on it for incident response, monitoring, audit trails, and operational dashboards. It is common in IT operations, security operations, and environments with many connected systems.
Splunk is the product family, while SPL is the Search Processing Language used to query and transform data inside it. Splunk Enterprise and Splunk Cloud are the main deployment models people usually mean when they search for the platform. When a freelancer knows all three, they can move faster across search, administration, and app work.
Splunk projects move faster when the brief includes data sources, index names, search goals, dashboard needs, and alerting requirements. It also helps to list whether the work is for operations, security, or compliance use cases. A clear brief lets the specialist focus on design instead of discovery.
A strong Splunk specialist usually brings log analysis, Linux basics, networking awareness, and a solid grasp of security or observability concepts. Knowledge of regex, JSON, REST APIs, and source onboarding is often important too. For larger setups, understanding role-based access and data model design helps a lot.
Splunk work can be small, but search design and data modeling often need someone who has handled real production data before. Simple dashboard tasks may be straightforward, while index strategy, correlation searches, and noisy alert reduction need deeper practice. The right depth depends on how critical the data is.
Splunk tasks can often be done remotely because searches, dashboards, and alert logic live in the platform. On-site time helps when a team needs workshops, access discussions, or alignment with operations and security stakeholders. Many projects use a mix of both.
A good Splunk freelancer explains choices clearly, writes readable SPL, and can show how searches perform on real data. Look for clean dashboard structure, sensible alert thresholds, and solid understanding of data onboarding and field quality. Quality also shows in documentation and handover, not just in the finished search.
Splunk is often used in Stuttgart where enterprise IT, manufacturing, mobility, and security monitoring are important. Teams in these settings usually care about system visibility, incident handling, and stable reporting. That makes clear search logic and well-structured dashboards especially valuable.
The average hourly rate of freelancers in Stuttgart, Germany who have used Splunk in their recent projects is 141 €, which corresponds to a daily rate of about 1,126 € based on an 8-hour working day.
Of the freelancers in Stuttgart, Germany who have used Splunk in their recent projects, 100% hold at least a Bachelor's degree and 40% hold at least a Master's degree.
On average, freelancers in Stuttgart, Germany who have used Splunk in their recent projects have 18 years of professional experience, with a single engagement typically lasting around 1.7 years.
The most common languages among freelancers in Stuttgart, Germany who have used Splunk in their recent projects are German (100%), English (100%), and Spanish (33%).
The most common industries among freelancers in Stuttgart, Germany who have used Splunk in their recent projects are Automotive (100%), Information Technology (83%), and Banking and Finance (67%).
The most common business areas among freelancers in Stuttgart, Germany who have used Splunk in their recent projects are Information Technology (100%), Product Development (83%), and Operations (67%).
Main locations of FRATCH Experts, who have recently used Splunk
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!

Berlin
Hamburg
Munich
Cologne
Frankfurt
Dusseldorf