Specialist - Architecture

Senior Splunk Engineer

What you will be doing

The Senior Splunk Engineer will be a member of the SecOps Technology Engineering team responsible for the Splunk SIEM and SOAR platforms along with other technology supporting Global Cybersecurity Operations The team partners with IT Infrastructure teams in endtoend deployment of security technologies across the firm

The role involves the architectural design and technical support for SIEM and SOAR platform infrastructure Splunk Phantom and AWS This includes system integration and interoperability application components systems programming ingestion and normalization of security log sources patches and upgrades capacity planning performance management and use case development

The role requires an experienced systems engineer with strong technical leadership and collaboration skills The ideal candidate will have significant experience in SIEM technologies Linux andor Windows system administration and cloud infrastructure eg Splunk ES Splunk SOAR RHELAL2 Windows Server AWS platform services etc

Responsibilities will include But not limited to

Engineering leadership and support for existing and future SIEM and SOAR technology Splunk ES Phantom etc

Leading the continued technical enhancement of security platforms

Supporting the identification development and implementation of new detections use cases

Leading the continued evolution of automation and orchestration across the platform

Training and developing other members of the Logging and Operations team as well as other members of the engineering function

Supporting a culture of individual selfimprovement whereby staff are expected to maintain subject matter expertise within their area of focus and within the realm of cybersecurity more broadly for example remaining up to date on the latest forensic techniques and tooling for strategically important platforms

Taking a leading role in the engagement of Global Businesses and Functions driving global uplift in cybersecurity awareness

Collaborating with various layers of management across Cybersecurity and other IT teams to develop solutions that protect the organisation

Designing and driving the implementation of new service offerings capability uplifts and process improvements to protect the bank for a continuously changing threat landscape

What you will bring to the role

To be successful in this role you should have proven experience within the Technology sector with knowledge of the following skills

Technical expertise of enterpriselevel SIEM technology and logging frameworks

Extensive experience in deploying configuring upgrading and administering Splunk clusters at scale

An ability to perform installation configuration management capacity planning license management data integration data transformation field extraction event parsing data preview and application management of Splunk

ScriptingProgramming experience with Python Bash Powershell

An ability to communicate complex and technical issues to diverse audiences

Selfmotivated and possessing of a high sense of urgency and personal integrity

A teamfocused mentality with the proven ability to work effectively with diverse stakeholders

Ability to orchestrate manage and successfully implement major procedural and technological change within a complex global organization

Formal education and advanced degree in Information Security