Splunk Security Engineer

Smarttech247 Switzerland; Zürich; Vor Ort; CHF 80’000 - 110’000; Vollzeit

Zusammenfassung

An innovative firm seeks a Splunk Security Engineer to enhance its security infrastructure. This role involves deploying and optimizing Splunk solutions for effective log management and SIEM, responding to security incidents, and conducting proactive threat hunting. The ideal candidate will possess a strong background in security and cloud technologies, along with excellent analytical skills. Join a diverse team committed to fostering an inclusive workplace where your contributions will drive significant improvements in security posture and innovation.

Qualifikationen

• 2+ years of experience in Security, IT, System, or Network Administration/Engineering.
• Strong knowledge of Splunk architecture, searches, dashboards, and alerts.

Aufgaben

• Lead deployment, configuration, and optimization of Splunk solutions.
• Develop and maintain security monitoring solutions with Splunk.

Kenntnisse

Splunk Deployment

Security Incident Response

Threat Hunting

Analytical Skills

Problem-Solving

Ausbildung

Bachelor's degree in Computer Science

Certifications like Splunk Core / Cloud Admin

Tools

Splunk

Azure Sentinel

SIEM

DLP

Firewalls

WAF

VPN

EDR

IPS/IDS

Email Gateway

Jobbeschreibung

Smarttech247 is hiring a Splunk Security Engineer to design, implement, and manage our security infrastructure. This role offers an exciting opportunity to work with cutting-edge technologies, especially Splunk and Azure Sentinel.

Responsibilities:

1. Splunk Deployment and Configuration: Lead the deployment, configuration, and optimization of Splunk solutions for effective log management and SIEM.
2. Security Incident Response: Collaborate with the incident response team to analyze and respond to security incidents using Splunk as a primary investigation tool.
3. Security Monitoring: Develop and maintain security monitoring solutions with Splunk to detect and respond to threats proactively.
4. Threat Hunting: Conduct proactive threat hunting using Splunk queries and other tools to identify risks and vulnerabilities.
5. Collaboration and Training: Work with cross-functional teams to improve security posture and train staff on security tools.
6. Documentation: Maintain documentation related to Splunk configurations, security procedures, and incident responses.

Qualifications:

1. Experience with maintenance and deployment of Splunk Core and Enterprise Security.
2. Strong knowledge of Splunk architecture, searches, dashboards, and alerts.
3. Minimum of 2 years of experience in Security, IT, System, or Network Administration/Engineering.
4. Experience with security solutions such as SIEM, DLP, Firewalls, WAF, VPN, EDR, IPS/IDS, Email Gateway, etc.
5. Knowledge of cloud security (AWS, Azure) is preferred.
6. Understanding of cybersecurity principles and best practices.
7. Excellent analytical and problem-solving skills.
8. Bachelor's degree in Computer Science, Information Security, or related field.
9. Certifications like Splunk Core / Cloud Admin are advantageous.

Our Commitment:

At Smarttech247, we are dedicated to diversity and inclusion. We believe a diverse workforce enhances innovation and problem-solving. We are an equal opportunity employer committed to a discrimination-free workplace. Employment decisions are based on qualifications, merit, and business needs.