2 of 2 Contract Splunk Jobs in the South West

Incident Response Proven experience leading investigations involving advanced persistent threats, insider threats, or targeted attacks Strong hands-on expertise with: SIEM platforms (e.g. Sentinel, Splunk, Elastic) EDR/XDR solutions (e.g. Defender, CrowdStrike, SentinelOne) Network and cloud security telemetry Strong understanding of: MITRE ATT&CK Windows, Linux, and cloud attack ...

Exposure to cloud networking Tech environment Cisco (current) → migrating to Juniper Meraki wireless Windows + Ubuntu (Nutanix/AHV) SIEM/SOC: Defender, Sentinel, Splunk Tooling: Darktrace, Nessus Desirable Check Point experience Security testing IEC 62443 Please apply now for consideration and a call back about this interesting/possible ...