Splunk Engineer

Job Description

Position:
Splunk Engineer

Location: NYC, NY

Mode of Hire:
Contract

Job Description:

• Strong understanding of cybersecurity principles, threats, vulnerabilities, and incident response protocols.
• Proficient in creating complex Splunk SPL (Search Processing Language) queries and developing advanced correlation rules.
• Experience with log and data source integration, data normalization, Splunk data models, and Splunk CIM.
• Knowledge of network protocols, infrastructure, and key security technologies (firewalls, IDS/IPS, endpoint security, etc.).
• Optional
  
  Qualifications:
• Bachelor's degree in Computer Science, Information Technology, or Cybersecurity.
• Minimum of 5 years of experience working with Splunk in a cybersecurity context.
• Splunk Power User or Splunk Enterprise Certified Admin certification is highly desired.
• Excellent problem-solving skills and the ability to work independently or as part of a team.
• Exceptionally strong communication and documentation skills, capable of effectively articulating technical information to both technical and non-technical audiences.
• Understand the MITRE framework to perform a MITRE Framework mapping for all production Use Cases.
• Develop, configure, and maintain complex Splunk search queries, reports, alerts, and dashboards to meet the specific needs of the organization.
• Collaborate with cybersecurity analysts to identify key data points and log sources for correlation to enhance threat detection and response capabilities.
• Implement advanced Splunk correlation techniques to identify and alert on any potential security incidents and vulnerabilities.