Job Description

My client in the Aerospace industry is looking for a SPLUNK Security Engineer based of London, this position can also be made remote.

What you\'ll be doing as a SPLUNK Security Engineer:

• Installation & support of Splunk Enterprise Platform
• Working with Admin ON Demand / Splunk PS to conclusion of issues within the environment
• On-Boarding new data sources and Apps and Add-ons into Splunk
• Building/testing log ingestion sources
• Development of automation scripts using Python and various toolset API\'s
• Supporting SIEM and SOAR technologies
• Provide ongoing management and administration of cyber security solutions
• Provide support to projects delivering and implementation of cyber security solutions
• Where required, integrate with service operations and project delivery to enable quick and compliant change and service stability
• Installation & support of security toolset hardware
• Provide guidance and support to team members where required

Essential for the SPLUNK Security Engineer:

• Knowledge of deploying, maintaining, and configuring the Splunk Enterprise Platform
• A strong technical background with a proven experience in a Splunk role
• Good understanding of architecture and configurations of large-scale networks (30,000+ devices) and the underlying security technologies
• Experience of working with system management toolsets in a technical capacity
• Previous experience and exposure to Windows Event Collection/Forwarding (build, configuration, and tuning), Log sources and ingestion, CIM Mapping, RegEx Field Extractions, Syslog + Parsing

Robert Walters Operations Limited is an employment business and employment agency and welcomes applications from all candidates

Robert Walters