5 of 5 Splunk Jobs in Berkshire

team, or cyber defence environments, with ideally around five years hands on experience. Strong hands-on experience using SIEM platforms, including: Microsoft Sentinel (KQL) Splunk (SPL) Elastic Security/Kibana (KQL, ESQL) Practical and operational understanding of MITRE ATT&CK, attacker techniques, and adversary tradecraft Experience working with Indicators ...

operational standards What We're Looking For Strong experience within a SOC/CSOC environment Hands-on expertise with SIEM tools (e.g. Microsoft Sentinel, Splunk, Elastic) Experience with query languages such as KQL/ES|QL/Kibana Solid understanding of threat detection, IOCs, and attacker TTPs Proven experience across ...

Linux, UNIX (Solaris exposure desirable) Common Mandatory Skills SQL Oracle databases, performance and troubleshooting queries Linux Scripting, process analysis, log review Monitoring & Observability Dynatrace, Splunk, Elastic stack ITIL Incident, Change, Problem, Release Management Service Management tools Remedy or equivalent Jira, Confluence, Knowledge Base authoring ...

Responsibilities Monitoring and Triage Monitor security events and alerts using industry-standard SIEM and incident/event management platforms (e.g., Elastic, Microsoft Sentinel, Splunk). Perform rapid triage to determine alert validity, severity, scope, and potential business or operational impact. Correlate related events and identify patterns across multiple alerts … written communication (clear, structured incident notes and stakeholder updates). Strong foundational knowledge of incident and event management/SIEM platforms (e.g., Elastic, Sentinel, Splunk), including query languages used for investigations and detections such as: Kusto Query Language (KQL) ES|QL Kibana Query Language Strong understanding of attacker tactics, techniques ...

filtering platforms to ensure secure access, appropriate content filtering and safeguarding compliance (including KCSIE requirements). Monitor network traffic and security events using Splunk and related tooling, investigating alerts and supporting detection, containment and remediation of incidents. Support vulnerability management processes across network and security infrastructure. Contribute to the development … would be advantageous). Practical understanding of cyber security principles, threat monitoring and operational security controls. Experience using SIEM or monitoring platforms (experience with Splunk would be highly advantageous) Knowledge of secure network segmentation, filtering and access control models. Experience investigating and responding to security alerts or anomalous network activity. ...