Information Security Splunk...

Description

Responsibilities Support largescale deployments with data feeds from multiple data centers Develop Splunk correlation searches to identify and address emerging security threats through the use of continuous monitoring, alerting and analytics Installing, configuring and administering Splunk Enterprise Server and Splunk Universal/heavy forwarders in large distributed environment Installing and configuring Splunk apps in a clustered environment Administering Splunk knowledge objects Creating roles and user authentication Integrating events from nontraditional log services Administering Splunk cluster components (search head cluster, indexer cluster and distributed management console) including version upgrades, permissions, and audit compliance Mentoring other Information Security team members to support and assist in Splunkrelated activitiesRequirements Five years of experience in a technical information technology role. Experience integrating solutions in a multivendor environment (SaaS, PaaS, IaaS, etc) Ability to understand and write regular expressions Understanding of network design, encryption/PKI Ability to maintain strict confidentiality Analytical thinker with a high sense of urgency Ability to look at all situations objectively, loves to challenge assumptions Embraces a fastpaced, startupstyle environment Loves to crosstrain and build stronger teams