| Splunk Consultant :: Location : Remote at Remote, Remote, USA |
| Email: [email protected] |
|
http://bit.ly/4ey8w48 https://jobs.nvoids.com/job_details.jsp?id=1720109&uid= Role: Splunk Consultant Location : Remote Position type : Contract Project Duration : Long Term Detailed JD : We are seeking a subject matter expert on Splunk who is highly skilled and experienced in Splunk Correlation to join our dynamic cybersecurity team. The ideal candidate will have a strong background in the creation and management of comprehensive use cases, complex searches, custom reports, and dashboards. Managing the Splunk Cloud environment alerts to correlate and analyze data from various sources effectively. The role requires a deep understanding of cybersecurity principles and the ability to apply data analytics to enhance our organization's security posture. Responsibilities and Duties: Develop, configure, and maintain complex Splunk search queries, reports, alerts, and dashboards to meet the specific needs of the organization. Collaborate with cybersecurity analysts to identify key data points and log sources for correlation to enhance threat detection and response capabilities. Optimize Splunk performance by fine-tuning searches, data models, and summary indexes to ensure efficient data processing and retrieval. Implement advanced Splunk correlation techniques to identify and alert on any potential security incidents and vulnerabilities. Work closely with IT and security teams to integrate various log sources into Splunk, ensuring comprehensive visibility across the network. Conduct regular reviews of existing Splunk content, making adjustments and improvements to keep up with the evolving security landscape. Provide technical guidance and support to team members on Splunk best practices and advanced correlation techniques. Stay updated with the latest Splunk features and cybersecurity trends, incorporating new knowledge into the organization's Splunk environment. Participate in incident response activities, leveraging Splunk to provide critical insights and facilitate rapid resolution. Qualifications: Bachelor's degree in Computer Science, Information Technology, or Cybersecurity. Minimum of 5 years of experience working with Splunk in a cybersecurity context. Splunk Power User or Splunk Enterprise Certified Admin certification is highly desired. Strong understanding of cybersecurity principles, threats, vulnerabilities, and incident response protocols. Proficient in creating complex Splunk SPL (Search Processing Language) queries and developing advanced correlation rules. Experience with log and data source integration, data normalization, Splunk data models, and Splunk CIM. Knowledge of network protocols, infrastructure, and key security technologies (firewalls, IDS/IPS, endpoint security, etc.). Excellent problem-solving skills and the ability to work independently or as part of a team. Strong communication and documentation skills, capable of effectively articulating technical information to both technical and non-technical audiences. Looking forward to work with you! Thanks & Regards Lokesh Yadav Sr. Technical Recruter CloudThink Tech Inc E: [email protected] Website: https://cloudthinktech.com/ LinkedIn: https://www.linkedin.com/in/lokesh-yadav-35941b223/ Address: 10301 Northwest FWY STE 314, Houston TX, 77092 Please consider the environment before printing this e-mail. DISCLAIMER The information in this e-mail is confidential and may be legally privileged. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. If you have received this communication in error, please notify the sender and delete the e-mail and destroy any copies of it. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Any opinions or advice contained in this e-mail are subject to the terms and conditions expressed in the governing Cloud Think Technologies client engagement letter. Opinions, conclusions and other information in this e-mail and any attachments that do not relate to the official business of the firm are neither given nor endorsed by it. Cloud Think Technologies cannot guarantee that e-mail communications are secure or error-free, as information could be intercepted, corrupted, amended, lost, destroyed, -- Keywords: information technology card Texas Splunk Consultant :: Location : Remote [email protected] http://bit.ly/4ey8w48 https://jobs.nvoids.com/job_details.jsp?id=1720109&uid= |
| [email protected] View All |
| 10:22 PM 04-Sep-24 |