SIEM/ Threat Detection Engineer, Splunk

Harrington Starr have partnered with a leading global financial services organisation for a Threat Detection/ SIEM Engineer with a focus on Splunk.

The role has both technical and strategic importance within the cyber security team and will focus on developing world class Threat Detection services for their SOC. This role operates on a global basis.

Ona day to day basis the role will involve:

• Splunk Deployment including patch management to ensure health and stability
• Use case detection including staying up to date with existing attacker techniques and translating them in to business requirements.
• The on-boarding of log sources in to Splunk
• Collaborating with the SOC team on security incidents and
• Maximizing monitoring and detection capabilities of the Splunk platform
• Working with the Security Operations Manager on the evolving SIEM strategy

In order to be suitable you will need:

• A solid track record in a SIEM Engineering role with an in-depth knowledge of the Splunk platform
• Demonstrable experience of working with cyber defense /operations teams including a solid understanding of the incident response process
• An understanding of automation/ query languages- python, PowerShell, BASH
• Experience of working within a regulated environment including an understanding of NIST, ISO27001, or other similar frameworks
• Experience of financial services and experience of working in a cloud environment highly desirable

Please send your CV for immediate review.