Splunk Engineer

Our client is a highly reputed MNC.

Responsibilities:

SIEM Infrastructure administration

. Perform SIEM health check

. Monitor SIEM Server Storage, CPU and Memory Usage and perform necessary action.

. Perform SIEM version upgrade

. Update splunk configurations based on security advisory

. SIEM Infra Tuning and Performance Optimization

o Monitor SIEM data sources proactively to identify issues in the environment (ex: Index Cluster / Search head cluster issues / etc)

SIEM Data onboarding

. Data Onboarding (Including first level assessment, UAT Testing before live)

o Integration numerous logs sources including servers (Windows & Linux), devices and security tools like NAC, PAM, NBAD, IPS DAM, DLP, AV etc.

. Data Parser and CIM Mapping Configuration

SIEM Use Case Development

. Finetuning existing use cases

. Build new use cases

SIEM Troubleshooting and Splunk servers reconciliation

. Troubleshoot, investigate and remediate identified SIEM issues

. Monitor and troubleshoot the servers that have stopped reporting

. Troubleshooting issues with search scheduler management

. Search head tuning and optimization, for missed searches, failed jobs and scheduling searches etc.

. Liaise with IT support groups & service providers to resolve outstanding issues such log onboarding (e.g. HF related issue - Core team, source related issue - Cyber team to coordinate)

. Reconcile Splunk servers periodically

SIEM Documentation

. Prepare/update SIEM tool SOPs

. Update Splunk built documents, whenever there are changes to Splunk deployment architecture

Skills/Requirement:

. ITC/Diploma/Degree in engineering/Computer Science / IT/Cyber Security from a recognized education institution

. Professional security related qualification (e.g. SANS GCIA, GCIH etc.) will be favorable although not mandatory

. Very strong troubleshooting skills.

. Strong in providing operational support to any SIEM and other security platforms

. Strong knowledge in Syslog log management platform

. Experience in understanding end to end data flow

. Strong knowledge in understanding OS, Proxy, Network and other main-stream Infrastructure, Application, Access and Cloud logs.

We regret to inform that only shortlisted candidates will be contacted.

PERSOLKELLY Singapore Pte Ltd . EA License No. 01C4394 . EA Registration No. R1551626 (SUJA THERESA FRANCIS)

By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at . You acknowledge that you have read, understood, and agree with the Privacy Policy.

..................................