Description

Design, configure, and manage Splunk and Splunk Enterprise Security to support cybersecurity requirements. You will develop and maintain dashboards, reports, alerts, and analytics to identify security threats. Conduct data analysis and investigations using Splunk to detect and mitigate security incidents. Collaborate with cross-functional teams to integrate Splunk into security operations. Monitor and assess security risks and vulnerabilities to provide improvement recommendations.

Responsibilities

• Develop and maintain Splunk dashboards, reports, alerts, and analytics.
• Conduct data analysis and investigations to detect and mitigate security incidents.
• Collaborate with teams to integrate Splunk into security operations.
• Monitor security risks and provide improvement recommendations.
• Manage and engineer content for centralized logging solutions.

Required Skills

• 5+ years of experience in information technology.
• 2+ years of experience in information security.
• 1+ years of experience in SIEM content development (Splunk Enterprise Security).
• 1+ years of experience in log review, analysis, and designing searches or alerts.
• 1+ years of SOAR development experience using XSOAR, Chronicle, or Splunk SOAR.
• Experience with centralized logging solutions such as Splunk Enterprise, ArcSight, or ELK.
• Familiarity with security technologies and log outputs from non-security devices.
• Basic understanding of Shell scripting, Perl, or other scripting languages.
• Data processing and visualization skills using Excel or similar tools.

Preferred Skills

• Understanding of Splunk engineering.

Key Skills

Education

Any graduate