Senior Cyber Defense Engineer

Deloitte France; McLean (VA); On-site; USD 110,000 - 170,000; Full time

Job summary

Deloitte Global is seeking a Splunk Engineer to partner with multiple teams to build automation and data ingestion solutions. You will co-lead deployment improvements, document architectures, and troubleshoot complex production environments across Windows and Linux platforms.

The role requires strong communication and leadership as part of a global engineering team. Ideal candidates will have 2+ years of Splunk experience, cloud services knowledge (Azure/AWS), and experience with large-scale

Qualifications

• 2+ years Splunk engineering experience.
• 1+ years managing other Splunk engineers or projects.
• Strong understanding of Cloud Services - Azure, AWS.
• Strong understanding of Splunk data onboarding including CIM validation.
• Universal/Heavy Forwarder configuration experience, including encryption and compression settings.
• Experience working with a strict change control process utilizing tools such as Azure DevOps.
• Management/deployment experience with large scale/distributed Splunk environments.
• A solid understanding of Windows and Linux administration utilizing CLI.
• Knowledge of networking, firewalls, load balancers, etc.
• Demonstrate understanding of common enterprise applications (especially in the area of security).
• Knowledge of best practices for IT operations in an always-on service model.
• Excellent communication skills and ability to communicate with technical teams.
• Excellent influencing and reasoning skills; conflict resolution and consensus building.
• Ability to quickly explore, examine and understand complex problems.

Responsibilities

• Partner with development and operations teams to develop automation solutions and custom modules.
• Co-lead team initiatives to refine deployment practices for reliability, repeatability and security, coordinating with GEMS Engineering and other teams.
• Develop requirements for data ingestion methods based on input from stakeholders/leadership.
• Document and diagram deployment-specific aspects of architectures and environments; create runbooks and knowledge bases.
• Troubleshoot production issues using log analysis and debugging techniques.
• Suggest deployment pattern improvements based on past learnings and implement with the team.
• After hours on-call support occasionally required.

Skills

Splunk engineering

Team leadership

Cloud services

Splunk data onboarding

Forwarder configuration

Azure DevOps

Windows & Linux admin

Networking basics

Communication & collaboration

Problem solving

Education

Bachelor's degree in CS/Engineering

Splunk Certifications (Admin/Architect/Consultant)

Tools

Cribl

Job description

Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.

Work you'll do

• Partner with development and operations teams to develop practical automation solutions and custom modules.

• Co-lead team initiatives to continuously refine our deployment practices for improved reliability, repeatability,and security. Creating plans and collaborating with other GEMS Engineering team members, while coordinating with development and business teams.

• Develop requirements for data ingestion methods based on input from stakeholders/leadership.

• Clearly document and diagram deployment-specific aspects of architectures and environments, working closely with various teams to create application runbooks, playbooks, and knowledge base documents.

• Troubleshoot issues in production and other environments, applying debugging and problem-solving techniques (e.g., log analysis, non-invasive tests).

• Suggest deployment patterns & practices improvements based on learnings from past deployments and production issues, collaborate with GEMS Engineering team members to implement these.

• After hours on-call support occasionallyrequired.

The team

Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.

Qualifications

Required:

• 2+ years Splunk engineering experience

• 1+ years managing other Splunk engineers or projects

• Strong understanding of Cloud Services - Azure, AWS

• Strong understanding of Splunk data onboarding including Splunk App/TA configuration and CIM validation

• Universal/Heavy Forwarder configuration experience, including encryption and compression settings

• Experience working with a strict change control processutilizingtools such as Azure DevOps

• Management/deployment experience with large scale/distributed Splunk environments

• A solid understanding of Windows and Linux administrationutilizingCommand Line Interface (CLI)

• Knowledge of networking, firewalls, loadbalancersetc.

• Demonstrate understanding of common enterprise applications (especiallyin the area ofsecurity)

• Knowledge of best practices for IT operations in an always-on, always-available service model

• Excellent communication skills and the ability to communicate appropriately with/manage technical teams

• Excellent influencing and reasoning skills; good at conflict resolution and consensus building

• Ability to quickly explore, examine and understand complex problems

Education and experience:

• Bachelor's degree in Computer Science, Computer Engineering, Finance, Mathematics, Business InformationSystemsor other bachelor's degree combined with relevant experience and accomplishments.

• One or more of the following: Splunk Certified Admin, Splunk Certified Architect, Splunk Certified Consultant

Preferred:

• Experience withCribladministration and data onboarding

• Experience in working in a large global organization

Limited immigration sponsorship may be available.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.