Senior IT Security Specialist (Splunk)

Ørsted A/S; Warszawa; On-site; PLN 150,000 - 200,000; Full time

Job summary

A leading energy company is seeking an IT Security Expert to enhance security operations and utilize Splunk for monitoring and incident response within a global Cyber Defence Centre. Successful candidates will have extensive experience in security engineering and API architecture, enhancing the security posture through robust tools and practices. The role requires collaborating with multiple teams and involves a wide range of responsibilities aimed at protecting company assets across various environments.

Qualifications

• Solid understanding of security operations.
• Experience with Splunk's configuration and deployment.
• Familiar with API architecture and event-driven data transfers.

Responsibilities

• Maximize benefits from Splunk's Enterprise Security.
• Document architectural work and standards.
• Build and maintain Splunk infrastructure.

Skills

Security operations understanding

Splunk Enterprise Security experience

API and Interface architecture experience

Data management and analysis

Configuration implementation skills

MITRE ATT&CK framework understanding

Tools

Splunk

Job description

Join us in this role where you’ll put your technical information security skills to work in a critical infrastructure environment. As one of our dedicated IT security experts in Security Engineering, you’ll protect our company assets from security-related incidents by operating and improving security controls and tools on a global scale.

Welcome to Security Competency Centre

You’ll be part of Cyber Defence Centre where you, together with your colleagues, will design, build, and manage the core security stack to support our business units across IT and OT environments. The Cyber Defence Centre is the heart of the technical security team in the company, with experts in both offensive and defensive security. We’re expanding in both numbers and capabilities, as a global team located in multiple countries and delivering across different time zones to ensure the best support. You should be ready to take on the role of being an Splunk evangelist, that understand Splunk's strengths and weaknesses and explains best practices and tips and tricks to colleagues across the Cyber Defence Centre to make everybody better at using Splunk and maximizing the value of the tool.

You’ll play an important role in:

• working with our experts in security monitoring and incident detection and response on how to maximize benefits from Splunk's Enterprise Security in workflows
• documenting and maintaining architectural work and standards for data ingestion, interfaces, and security monitoring to support Ørsted vendor integration and monitoring demands
• partnering with other security specialists in the Cyber Defence Centre to improve efficiency, effectiveness and performance
• working with threat intelligence and adjacent teams in the Cyber Defence Centre to analyze and implement what data is needed in our work
• building, refining, and tuning correlation rules and custom detections based on evolving threats and security monitoring needs
• building, administering and maintaining the Splunk infrastructure and implementing Splunk best practices towards architecture, apps, add-ons, and searches, etc.

To succeed in the role, you:

• have a solid understanding of security operations, how threat intelligence can guide security engineering and familiarity with good security practices in the field in general
• have solid experience with Splunk Enterprise Security, incl. App Configuration, Data Input Configuration, Data Integration & Normalization and deployment of apps
• have experience in API and Interface architecture and event driven data transfer architectures
• have experience in data management and analysis along with good practices around data architecture
• have experience translating and implementing security requirements into technical configurations and use cases
• understand and navigate frameworks like MITRE ATT&CK to help assess or validate data source coverage.

Maybe you’ve read the above and can see you have some transferable skills, even though they don’t quite match all the points. If you think you can bring something to the team, we still encourage you to apply.

Shape the future with us
Send your application to us as soon as possible. We’ll be conducting interviews on a continuous basis and reserve the right to take down the advert when we’ve found the right candidate.

As an applicant or employee, you may request reasonable work and position accommodation or adjustments via [e-mail].

Please note that for your application to be taken into consideration, you must submit your application via our online career pages and answer the screening questions relevant for your country. We don't take applications or inquiries from external recruiters or agencies into account for this position.