The Position

• Providing Delivery Engineer' (Security Engineer) expertise as it relates to engineering, analyzing, and leveraging the ingestion of large amount of internal and customer information, events, and logs. Ensuring that a best of class security operations practice is in conformance with pre-existing and developing scopes as they relate to customers' needs and demands.
• Engineering, administration, and fostering an existing SIEM, while also being aware of, and assessing the posit for migration or evolving the incumbent platform. Ensuring best practice is adhered to regarding the deployment and operations of search heads, deployers, deployment systems, forwarding utilities and services, end point utilities, services, and applications, as well as in-house and third-party applications.
• The selected analyst will take charge and own the onboarding process, the coverage awareness and publishing, analysis orchestration, and responses to incident or anomaly. All configuration of files, services, and endpoints to meet or exceed promised metrics and SLAs. The selected individual will be required to have in-depth knowledge of SIEM components, architecture, operations, and tuning to ensure expeditious troubleshooting, tuning, and general usage. Query and dashboard creation will be a primary focus, as well as assistance in building and developing queries and dashboards (along with monitors, alarms and reports).

What You Will be Doing

• Query creation and adjustments for quick and ad-hoc customer needs or demands
• Dashboard building and editing for visual representation both internally, and to external stakeholders
• Splunk (cloud and on-premises) platform knowledge will be highly preferred
• Deep understanding of system configuration to best ship and forward logs, information, and events
• Application monitoring, and system monitoring knowledge
• Network understanding and competency
• Ability to do more than ‘modify’ existing scripts/SQL statements

What We Need from You:

• 2 - 3+ years in Security or Cybersecurity
• 2 - 3+ years or equivalent experience in professional or managed service delivery
• Experience with Windows and Linux operating systems
• Experience with Cisco or similar networking platforms

Desired Qualifications:

• Security+
• Splunk certification(s)
• Bachelor's degree in Computer Science, MIS, CIS, or similar