Description

You will act as a core member of the Observability team, focusing on SIEM and event/logging management to provide visibility across enterprise systems.

Responsibilities

• Support users with Getting Data In (GDIs) processes, including data classification and transfer to logging aggregation tools.
• Maintain and install Splunk Technical Addons for log pipeline implementation, data ETL, minimization, and obfuscation.
• Enforce best practices and strategies for teams to integrate with Tech Security and Compliance guidelines.
• Collaborate with cross-functional teams to troubleshoot and resolve monitoring-related issues.
• Work with Enterprise Engineering platform administration to maintain observability platform health.

Required Skills

• 2+ years of experience with security platforms, specifically Cloud SIEM, Application Security Management, and Security Posture Management.
• Specialization in Getting Data In (GDI) through data classification, pipelining/ETL, and data models.
• Working knowledge of Splunk Common Information Model and data model acceleration.
• Strong proficiency in SPL, particularly for correlation searches related to notable events.
• Experience with PII, CCPA, and GDPR data transformation rules.
• Experience with Linux log and event sources for security use cases.
• Technical experience with Cloud SIEM and security management tools.
• Ability to manage data pipelines including ETL and log-to-metrics conversion.

Preferred Skills

• Experience with Datadog, Splunk ES, Sentinel, or Prisma.
• Knowledge of Cloud Computing services including AWS, Azure, or GCP.

Key Skills

Education

Any Gradute