Splunk Security Engineer

Binary Defense; United States; On-site; USD 90,000 - 120,000; Full time

Job summary

Binary Defense is seeking a talented Splunk Security Engineer to join our Client Services and Support division. The role focuses on architecture, deployment, configuration, and management of Splunk instances for clients as well as security use-case development and alert configuration.

Security Engineers collaborate with clients and SOC analysts to ensure alerts are accurate and actionable, requiring strong problem solving and broad IT security expertise. Excellent communication is essential.

Qualifications

• Hands-on experience managing and deploying Splunk in a professional environment.
• Solid knowledge of information security and threat detection best practices.
• Strong Windows and networking fundamentals.
• Experience with PowerShell and scripting languages.
• Excellent written and verbal communication skills.

Responsibilities

• Architecting, administrating, and maintaining Splunk instances for clients as well as internal instances.
• Evaluating applications within a client environment and prioritizing data sources based on security value and license impact.
• Provide guidance on types of logs/events to collect from devices that will be most useful for security purposes.
• Determining best method for log collection and assisting clients with forwarding security logs to specified SIEM platform.
• Participate in weekly project meetings, both internal and client facing
• Work closely with the Project Coordinator to ensure projects stay on track and critical tasks are completed in a timely manner.
• Participate in weekly rotating on-call schedule.
• Other duties, as assigned by direct manager.

Skills

Splunk

Information security

PowerShell

KQL

Scripting languages

Windows administration

Networking fundamentals

Communication skills

Tools

Splunk

Job description

Binary Defense is seeking a talented Splunk Security Engineer in our Client Services and Support division. Primary responsibilities will include, but not be limited to, the architecture, deployment, configuration, and management of separate Splunk instances for our clients as well as the responsibility of security use-case development and alert configuration.

Security Engineers work closely with our clients as well as our SOC analysts to ensure systems and alerts are properly configured and understood appropriately for accurate alert escalation. Security Engineers must demonstrate intuitive problem-solving skills, have proficient information security knowledge, as well as a strong broad technical background.

Responsibilities:

• Architecting, administrating, and maintaining Splunk instances for clients as well as internal instances.
• Evaluating applications within a client environment and prioritizing critical data sources based on security value and license impact.
• Provide guidance on types of logs/events to collect from devices that will be most useful for security purposes.
• Determining best method for log collection and assisting clients with forwarding security logs to specified SIEM platform.
• Participate in weekly project meetings, both internal and client facing
• Work closely with the Project Coordinator to ensure projects stay on track and critical tasks are completed in a timely manner.
• Participate in weekly rotating on-call schedule.
• Other duties, as assigned by direct manager.

Requirements:

• Hands on experience in managing, configuring, and deploying Splunk in a professional environment.
• Strong and demonstrable knowledge in various areas of information security and their best practices. Current working knowledge of threats and how to detect them would be ideal.
• Solid foundation of IT knowledge and familiarity with system administration of Windows and various networking technologies.
• Experience with Query Languages preferably KQL
• Solid experience with PowerShell, and other scripting languages
• Excellent written and oral communication skills