Description

Design, configure, and manage Splunk and Splunk Enterprise Security to support cybersecurity requirements. You will develop dashboards, reports, and analytics to detect and mitigate security incidents while integrating Splunk into security operations.

Manage and engineer content for centralized logging solutions. Monitor security risks and provide improvement recommendations based on data analysis.

Responsibilities

• Develop and maintain Splunk dashboards, reports, alerts, and analytics.
• Conduct data analysis and investigations to detect and mitigate security incidents.
• Collaborate with cross-functional teams to integrate Splunk into security operations.
• Manage and engineer content for centralized logging solutions.
• Monitor security risks and provide improvement recommendations.

Required Skills

• 5+ years of experience in information technology.
• 2+ years of experience in information security.
• 1+ years of experience in SIEM content development (Splunk Enterprise Security).
• 1+ years of experience in log review, analysis, and designing searches or alerts.
• 1+ years of SOAR development experience using XSOAR, Chronicle, or Splunk SOAR.
• Experience with centralized logging solutions such as Splunk Enterprise, ArcSight, or ELK.
• Familiarity with security technologies and log outputs from non-security devices.
• Basic understanding of Shell scripting, Perl, or other scripting languages.
• Data processing and visualization skills using Excel or similar tools.

Preferred Skills

• Understanding of Splunk engineering.

Key Skills

Education

Any graduate