1 to 14 of 14 Splunk Jobs in the North of England

and enhancements in line with the changing threat. Requirements Technical Basic Python and/or scripting skills, Windows, OS X, and Linux Experience using Splunk and Sentinal Working with a range of security tooling/technology Strong understanding of security architecture, in particular networking Detailed understanding of threat intelligence and … attacks). Understand TCP/IP component layers to identify normal and abnormal traffic Understanding of AWS &/or Azure cloud services Experience of Splunk (with ES) &/or Sentinel, content development experience desirable Non-technical Client side consulting, including stakeholder engagement and the ability to communicate insights and concepts more »

access and visibility.As a Principal SIEM Engineer, you will have experience working in SOC’s and be an expert in building, configuring, and maintaining Splunk Enterprise Security platforms and developing use cases to meet client security requirements. You’ll also be a strong communicator and leader of people and have … opportunities to share your expertise with, and influence, clients and team members, and to continue to develop as a leader.The role in a nutshell:Splunk Core Certified accredited SME acting as both consultant and engineer on large scale Splunk Enterprise Security projectsCreating/tuning of SIEM detection rules to satisfy … Engineering & Data community to provide insight and awareness into latest industry trends and standardsSkills and experience that you needExtensive experience and expertise across the Splunk platform, its architecture and distributed components including premium apps (Enterprise Security, Phantom, etc…)Experience with Microsoft Sentinel Experience working alongside or within a SOC environment.Experience more »

/CD tools such as Jenkins. Experience with configuration management tools (Ansible, Puppet or Chef) Expertise in monitoring and observability technologies like Prometheus, Appdynamics, Splunk, Jaeger, Kiali, Open Telemetry. Expertise in cloud and DevOps, familiar to network (VPC) and firewall on cloud, iAM, cloud costing Expert-level SQL coding abilities more »

Experience: Professional experience of working in an Incident Response Team or a similar environment Knowledge of SIEM platforms such as Azure Sentinel, Microsoft Defender, Splunk, ArcSight, QRadar, or LogRhythm. Strong analytical and problem-solving skills with the ability to handle complex security incidents. Familiarity with regulatory frameworks and standards Click more »

shift schedule Ability to provide tuning recommendations for security tools to tool administrators. Familiarity with tools such as Wireshark, TCP Dump, Security Onion, and Splunk Strong knowledge of the following: SIEM Packet Analysis SSL Decryption Malware Detection HIDS/NIDS Network Monitoring Tools Case Management System Knowledge Base Web Security more »

switching. Proactive in identifying areas of improvement within current processes and driving change. Experience with Git or other modern source control system. Knowledge of Splunk, Elk, Grafana, Jenkins and Jira. Main Responsibilities Managing code repositories and automated build systems. Owning the application release processes, including versioning and release tickets. Collaborating more »

a wider team. Main Responsibilities Building sophisticated monitoring dashboards using log data, metrics and traces from a number of sources including New Relic, Grafana, Splunk and Kibana. Administering an incident response platform, like PagerDuty, to enable fast and efficient resolution of incidents. Working with service owners and other teams on more »

Experience responding to incidents across corporate and customer-facing web applications, identifying potential threats and mitigating/escalating as required.Experience with SIEM Platforms (ideally Splunk), including working with logs and creating correlation searches and dashboards is a plus.Knowledge of monitoring cloud environments using cloud native tooling.An understanding of relevant security more »

working 4 days on 4 days off. What you need: At least 4 years’ experience working in a Security operations centre Experience working with: Splunk, sentinel or defender What’s on offer: A base salary up to £65,000 + 10% Bonus Opportunity to progress and lead a large-scale more »

and management of effective SLI’s and SLO’s for reliability and customer satisfaction. Knowledge of contemporary observability tools, techniques and best practice including Splunk, New Relic, Grafana and Pager Duty. Excellent knowledge of programming languages including Python, Golang and JavaScript. Knowledge and experience of modern software development techniques and … orchestration platforms to automate manual activity and reduce toil. Building sophisticated dashboards using a range of telemetry data and dash boarding technologies like Grafana, Splunk and New Relic. Maintaining and administering existing monitoring and analytic toolsets. Mentoring colleagues in use of new technologies or practices. Contributing to the evolution of more »

in networking OSI layer, TCP/IP stack, VPN, Firewalls, subnetting, DNS, DHCP, FTP/SFTP, TLS, SSL, Apache, MSSQL, MySQL, Microsoft exchange services, Splunk, Qulays, CVE Experience in scripting like Terraform, Bash, Ansible, VMware, AWS, Azure, GCP Experience in AWS, RedHat, SLES Good communication skills, with strong ability for more »

Technology, Computer Science or relevant experience CISSP, CEH, OSCP, GCIH or applicable security field Incident, change and problem process management experience Experience in SIEM (Splunk, Sentinel), IPS and SOAR tools a plus Experience with investigating and managing major/complex cyber security incidents end-to-end Knowledge of adversarial tactics more »

degree of (hands-on) technical guidance & vision with broad subject matter expertise in cloud, data and security technologies, specifically AWS, Azure, and SIEM platforms (Splunk ES and Sentinel)Extensive experience and expertise across the Splunk platform, its architecture and distributed components including premium apps (ITSI, Enterprise Security, Phantom, etc…)Experience more »

Technical knowledge/experience required: ISO27001 qualification is advantageous CISSP qualification is advantageous Experience with firewalls (SonicWALL, Palo Alto, Fortinet) Experience with monitoring software (Splunk, Crowdstrike etc) What will you get up to? General day to day monitoring of the security systems (Firewalls, Software etc) Penetration testing to ensure systems more »