Splunk SIEM Security Engineer/Architect

PJ / autônomo · Pleno / sênior

  • Los Angeles · CA
  • Publicada há 364 dias
Candidatar-se no site da empresa

Conferida na fonte há 4 h

Com a sua conta Joonow (grátis), você segue para o site da empresa e a vaga fica nas suas candidaturas.

Nenhuma empresa séria cobra taxa, curso, exame ou uniforme. Desconfiou?

Descrição da vaga

Exciting Splunk SIEM Security Engineer/Architect contract opportunity.

Requirements

Requirements

  • 3 plus years of experience in Spunk (SIEM) Security Enterprise: architecting, configuring, deploying, and customizing the tool, preferably both in supporting the application and utilizing the application for information security monitoring, incident response, and compliance
  • Onboard new data sources to the Splunk environment as required by the customer Cybersecurity Team for monitoring by the client SOC
  • Configuration of Correlation Searches, Dashboard Searches, Risk Modifiers, Threat Intelligence Feeds, Workflow Actions and Enterprise Security content
  • Validate and Manage all Splunk forwarders reporting into the Splunk environment
  • Manage and optimize the Splunk environment, Enterprise Security Module and Phantom Module.
  • Implement new Correlation Rules (Correlation Searches) in the Splunk environment Enterprise Security Module
  • Ability to perform security analysis, development and implementation of security policies, standards, and guidelines
  • Perform ongoing development for additional use case and SIEM tuning.
  • Experience with implementation of Log Management and Analytics products - Splunk

Prepare-se para esta vaga

Candidatar-se