| Splunk Developer at Remote, Remote, USA |
| Email: [email protected] |
| From: Sanjeev Kumar Singh, Tek Inspirations LLC [email protected] Reply to: [email protected] Job Description - Title: Splunk Developer Duration: 12 months Location: Texas or NC (hybrid) MoI; Skype Need Local consultant TX or NC Need 1 or 2 resume only Job Description: Responsibilities Must have strong exp Dash borad , reports , security maintaining SOC standard operations procedures. Qualifications Works with IT Platform, Application, System and Network teams to review Logical, Physical and Data architecture diagrams. Normalizes endpoint behavior, data access and network traffic. Implements security monitoring and documents standard operations procedures for the Incident Management Team. Implements security monitoring rules, reports and dashboard while maintaining best practices to ensure maximum security tool efficiency. Monitors security systems, analyzes events and investigates security-related incidents. Creates Threat Hunting models for Endpoints and Network Traffic. Analyzes endpoint including logging, EDR, IPS and DLP tools. Analyzes network monitoring including IPS, WAF, PCAP and Netflow tools. Focuses on critical systems within Vanguards network to detect, respond and handle incidents related to unauthorized activity, malware, and APTs Keeps management within the department informed by communicating progress, issues, concerns and opportunities. Assesses and immediately notifies manager of any potential information security breech and security issues that may have a negative impact on business operations. Identifies opportunities to improve the quality, efficiency and effectiveness of the department as well as the processes that affect the divisions and the enterprise. Maintains an awareness of the department's dashboard and provides suggestions to improve performance. Identifies Tactical Intelligence relevant to Vanguard systems. Works with Incident Management and Threat management to follow incident response procedures to ensure proper detection, mitigation controls. Escalates internal threat issues to the Insider Threat Team. Participates in special projects and performs other duties as assigned. They are purely looking for a Splunk Developer not an engineer. They will be developing alerts, dashboards, reports etc.. not an Endpoint Engineer. Security Knowledge obviously is a must have and looking for strong experience. prefers closer to 8 years of experience Keywords: information technology North Carolina Texas |
| [email protected] View all |
| Sat Nov 04 03:27:00 UTC 2023 |