Senior Splunk Engineer – Cyber Security

US Tech Solutions is a global staff augmentation firm seeking a Senior Splunk Engineer to support their Cyber Monitoring and Response team. The role involves working with Splunk deployments, implementing integrations, and developing security use cases to enhance the Splunk environment.

Responsibilities:

• The Resource will be working with the Cyber Monitoring and Response (M&R) team to support the client
• Splunk deployment, the implementation of API configurations to support integrations/data integration requests, define and write security/risk-based use cases, and support assessing various Splunk capabilities
• Under the direction of the Assistant Director, Cyber Security Operations, you will:
• Work with the Cyber Monitoring and Response SIEM team, the Splunk solutions integrator and other stakeholders to support the development and implementation of enhancements to the Splunk environment and associated use cases
• Perform operational and maintenance activities to support the ongoing stability, performance, and availability of the Splunk environment
• Support the integration of Splunk with other tools, including Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) solutions and data and analytical environment and platforms
• Gather requirements and define data security and risk-based use cases and associated processes
• Document all work products and deliverables produced
• Troubleshoot and resolve issues related to Splunk integrations to ensure reliable data flow and system performance
• Participate in current/future state solutions design and development phase to implement data analytical use cases, including Machine Learning (ML) models
• Identify opportunities to optimize the use of Splunk Enterprise Security and its integration with other tools and provide best practice guidance along with recommended options and solutions
• Prepare detailed specifications documents as required
• Participate in the process of prioritizing client requests
• Develop and deliver communications to clients and stakeholders
• Other related activities and deliverables as required

Requirements:

• Accredited Splunk Enterprise/Enterprise Security Certification
• University Degree or College Diploma in Computer Science, Information Technology or a related field
• A minimum of five (5) years of demonstrated experience with Splunk Enterprise Security
• A minimum of five (5) years of recent demonstrated experience setting up Splunk with an organization of similar size to the client
• Demonstrated experience in developing and implementing advanced data analytical use cases including machine learning models
• Demonstrated experience parsing data files for Splunk
• Demonstrated experience using Linux, Windows and Syslog
• French will be considered an asset
• Experience with Cyber Security projects that involve Solution Integration with multiple vendor technologies
• Knowledge of service and project delivery methodologies
• Experience with agile and traditional system development life cycles (SDLC)