SIEM Architect
4 days ago
Manila, Metro Manila, Philippines
Avaloq AG
Full-time
Free with email or Google
Save this job and keep your search organized
Create a free account to save jobs, create alerts and return to this listing from your dashboard.
Free with email or Google
By continuing, you agree to our Terms & Privacy Policy.
- Design, implement, and manage the Splunk infrastructure.
- Deploy and manage Splunk indexer clusters and search head clusters.
- Performing optimization of existing clustered Splunk deployments.
- Monitor operations of Splunk platform to enable proactive issue identification, response, and resolution.
- Integrate Splunk with a wide variety of legacy data sources, industry leading commercial security tools and Cloud Service provider facilities.
- Build Splunk Technology Add-ons.
- Build custom script in the following languages (Python, Bash, PowerShell, VBscripts).
- Build Splunk apps to be deployed on thousands of Splunk Universal Forwarders.
- Interact with REST API endpoints.
- Interact with RBDMS in SQL.
- Effectively and efficiently onboard data sources, create indexes and data model, create CIM compliant data mapping, establish health monitoring and KPIs.
- Manage Splunk knowledge objects (Apps, Dashboards, Saved Searches, Scheduled Searches, Alerts. etc..)
- Manage Splunk Role Based Access Control.
- Design and implement Correlation Searches in Splunk Enterprise Security.
- Maintain and extend correlation between Asset&Identity and Splunk Enterprise Security framework.
- Onboard Threat Intelligence feeds and correlate with data.
- Assist Security Analysts providing them consultancy to leverage the Splunk environment.
- Drive the operational model transformation of SecOps.
- Identify technology gaps, security gaps, develop solutions and make recommendations for continuous improvement.