2 of 2 Remote/Hybrid Splunk Jobs in Manchester

escalating issues where required. Technical Skills: Strong hands-on experience of Security Operations tools and capabilities, including SIEM and SOAR platforms (e.g. Sentinel, ServiceNow, Splunk SOAR, Cortex), Endpoint Detection & Response (EDR/XDR), Strong hands-on experience of Threat Intelligence platforms (e.g. Recorded Future, Doppel, ZeroFox, Google Threat Intelligence), Vulnerability ...

code in a production context. Python is strongly preferred. Proven ability to write and tune detection rules in one or more SIEM platforms (e.g. Splunk, Microsoft Sentinel, Elastic, QRadar). You are comfortable translating threat scenarios into detection logic and iterating on rule quality based on operational feedback. Hands … analytics platforms. Relevant industry certifications such as CISSP, AWS Solutions Architect, GCIH, or equivalent. Experience supporting or replacing incumbent security platforms (e.g. Darktrace, CrowdStrike, Splunk) within enterprise customer transitions. What Success Looks Like Within your first 90 days, you will have completed at least one end-to-end customer deployment ...