Security Engineer - Splunk

What You'll Do:

• Deploy, configure, and maintain the Splunk environment to help the internal security team effectively manage security threats and risks
• Work cross-functionally to support other tech stack owners in the configuration and maintenance of security-centric tools (e.g. ELK, IAM tools, DLP technologies)
• Architect, build, and expand on existing solutions to solve challenging problems
• Develop dashboards, design data models, and deliver analysis of security logs in order to ensure the security of the Recorded Future enterprise

What You'll Bring:

• 3+ years of experience with deployment, configuration and troubleshooting of SIEM appliances, (Splunk)
• Experience operating within a CSIRT or SOC environment
• Experience with Cribl is a Plus
• Hands-on ability to manage distributed Splunk cluster infrastructure and all related components
• Experience administering a Splunk environment consisting of search heads, indexers, deployers, deployment servers, universal forwarders, clustering and Splunk IT Service Intelligence for access, performance, and operational roles.
• Good knowledge of Splunk SPL and visualizations to identify anomalies and trends
• Ability to define and onboard new data sources into SIEMs/Splunk
• Scripting skills with languages such as Perl, Bash, Python to develop custom code when needed
• Ability to diffuse large sets of data and information into actionable recommendations for the security team and leadership
• Strong problem-solving and analytical skills
• Time management and organizational skills
• Willingness to travel 10%

Why should you join Recorded Future? Recorded Future employees (or “Futurists”), represent over 40 nationalities and embody our core values of having high standards, practicing inclusion, and acting ethically. Our dedication to empowering clients with intelligence to disrupt adversaries has earned us a 4.6-star user rating on G2 and more than 50% of Fortune 100 companies as customers. Want more info?

Blog & Podcast: Learn everything you want to know (and maybe some things you’d rather not know) about the world of cyber threat intelligence

Linkedin, Instagram & Twitter: What’s happening at Recorded Future

The Record: The Record is a cybersecurity news publication that explores the untold stories in this rapidly changing field

Timeline: History of Recorded Future

Recognition: Check out our awards and announcements

Recorded Future: From treadmill eureka moment to global threat intelligence powerhouse - YouTube

Tap to unmute

Recorded Future: From treadmill eureka moment to global threat intelligence powerhouse Mastercard News

Mastercard News21K subscribers

_We are committed to maintaining an environment that attracts and retains talent from a diverse range of experiences, backgrounds and lifestyles.  By ensuring all feel included and respected for being unique and bringing their whole selves to work, Recorded Future is made a better place every day._