Role: We specialise in delivering cyber security and data analytics solutions for some of the UK's biggest brands in financial services and public sector. As a long-standing Splunk partner , we're passionate about creating secure, resilient environments for our clients. We're growing our team and looking for a Cyber Data Engineer with a Linux background and exposure … to Splunk or similar monitoring tools and a real passion for working in a security-focused environment. You don't need to be a Splunk expert on day one - if you have the right foundation and mindset, we'll invest in your formal Splunk training and certification. As the Cyber Data Engineer, you will be: Supporting the administration and scaling … of a large-scale Splunk platform (30TB+ ingestion). Working closely with SRE and SOC teams to optimise platform performance and security investigations. Enhancing Splunk platform configurations and helping scale the platform for future growth. Assisting with infrastructure projects including: Linux migration (RHEL7 to RHEL9) Splunk upgrades (v9 to v10) LAN migration to AWS cloud Maintaining operational health and refining More ❯
tool sets and collaborating with systems and network engineers. Create and maintain custom dashboards, develop complex queries, generate reports, and configure alerts and notifications using cybersecurity tools such as Splunk, Tenable, and Trellix to support monitoring, analysis, and incident response activities. Identify and onboard new data sources into cybersecurity tools, and perform analysis to detect anomalies, patterns, and trends that … information systems. throughout the system development life cycle to support the generation of the security engineering products. Assist with the design, deployment, and administration of a multi-site, distributed Splunk environment. Including Multi-site Clustering, Search Head Clustering, Universal Forwarders, Deployer, and Deployment Server. Configure, operate, and maintain Trellix and its components (ePolicy Orchestrator, Trellix Agent, Data Loss Prevention, Host … and efficiency as well as integration of new techniques to improve the confidentiality - integrity - availability of network/operational systems at multiple classifications levels. Qualifications - External Requirements: Experience in Splunk role while working in a Splunk Clustered Environment Knowledge and experience with NESSUS/ACAS and Trellix administration Must be able to work a 40-hour work week, normally Monday More ❯
A client of Innova Solutions is immediately hiring a Splunk Systems Administrator. Position Type: Fulltime - Contract Location: Newport News, VA 23607 Duration: 12 Months The ideal candidate will have: Maintains smooth operation of multi-user computer systems, including coordination with network administrators. Duties may include setting up administrator and service accounts, maintaining system documentation, tuning system performance, installing system wide … monitors policies and standards for allocation related to the use of computing resources. Required: Experience with Linux and Windows environments Experience with interacting with customers configuration and optimization in Splunk Experience with using scripting languages to automate tasks and manipulate data Strong expertise, understanding architecture and ability to create, modify, troubleshoot data queries through various data sources Knowledge of enterprise … information and event management (SIEM) Experience with infrastructure management and support and system administration in Windows and UNIX environments Experience with security tools, including Firewall, IDS, and Active Directory Splunk Administrator Certification Qualified candidates should APPLY NOW for immediate consideration! Please hit APPLY to provide the required information, and we will be back in touch as soon as possible. We More ❯
Administration Network Security, Networking Standards, Network Protocols, NIST/FISMA standards and controls, SIEM platforms and security tools, Network Hardware Configurations • Cyber Security Training or Certification (ie Securty+, Network+, SPLUNK, FireEye) • Knowledge of NIST SP series or ISO 27000 series documents • Windows 10 security best practices and configurations • Understanding of advanced threat detection in an enterprise environment • Understanding of malware … families, their types, and the threat they pose • Proficiency with Microsoft Windows administrative & troubleshooting tools • Demonstrated experience performing cybersecurity analysis from an operations & engineering perspective • Background with Splunk (preferred) or other SIEM platform More ❯
Reading, Berkshire, South East, United Kingdom Hybrid / WFH Options
LA International Computer Consultants Ltd
to strengthen the Security Operations Center. As a Tier 3 CERT Analyst you will lead the investigation and remediation of advanced cyber threats, leveraging cutting-edge tools such as Splunk, Microsoft Sentinel, CrowdStrike, and Defender and other security stacks. You will handle complex incidents like APTs, malware, and data breaches, ensuring swift, effective responses to minimize risk to the organization … automate tasks or create custom detection methods. o Strong experience in handling complex cyber incidents (e.g., APTs, ransomware, data breaches). o Hands-on experience with SIEM platforms (e.g., Splunk, ArcSight, LogRhythm) and endpoint detection/response (EDR) tools. *Certifications (Preferred ): o Certified Information Systems Security Professional (CISSP) o Certified Incident Handler (GCIH, EC-Council) o Certified Forensic Computer Examiner More ❯
Web/Email gateway security technologies, Security Orchestration, Automation and Response (SOAR) and cloud based platforms such as Azure, AWS, or Google • Experience with MITRE ATT&CK • Experience with Splunk or Splunk Enterprise Security Optional Requirements: • Ability to demonstrate interpersonal, organizational, writing, communications, and briefing skills • Ability to effectively use analytical and problem-solving skills • Provide logical use case development. More ❯
networking protocols (TCP/IP, VPN, DHCP, DNS, etc.). • Experience with backup and disaster recovery solutions. • Experience with revision control systems/practices (e.g., Git). • Experience with Splunk for monitoring, data analysis and visualization. • Familiarity with server virtualization technologies (e.g., VMware, Hyper-V). • Linux OS platform experience highly desired. • Familiarity with Virtualized Environments. • Familiarity with containerized workloads. More ❯
systems. Optional Skills: As a bonus, the idea candidate will also have: Experience with application platforms such as Spring Boot or Angular Experience with log analytics tools such as Splunk or ElasticSearch Experience working with containers using Docker Experience with container orchestration systems such as Kubernetes and Mesos Experience in communicating with users, technical teams, and senior management Comfortable working More ❯
customers. Fluency in English is required along with strong technical writing skills. Your Background: 5+ years of experience working with log management/SIEM solutions (e g, Falcon LogScale, Splunk, Trellix, Chronicle, Exabeam, Sumo Logic, etc) and SOAR (e.g., Crowdstrike Fusion, Palo Alto XSOAR, Splunk Demisto, etc.) in a professional services consulting role or similar capacity Experience working with pre More ❯
to communicate clearly with all levels within an organization Excellent analytical skills, organizational abilities and problem-solving skills Experience in instituting data observability solutions using tools such as Grafana, Splunk, AWS CloudWatch, Kibana, etc. Experience in container technologies such as Docker, Kubernetes, and Amazon EKS Qualifications: Ability to obtain an Active Secret clearance or higher Bachelors Degree in Computer Science More ❯
experience developing and integrating systems and applications using the following listed technologies: XML SOAP/REST, JSON, Niagra Files (NiFi) o Elastic Search/Log Stash/Kibana (ELK), Splunk, Java, Java Script, Python, Perl, IBM Sterling Connect Direct, Microsoft Power Shell scripting, KShell, BASH, etc. Requirements: - Seven (7) years of increasing knowledge, skills, and abilities in the development, deployment More ❯
with AWS cloud infrastructure • Deep understanding of IaC tools: Terraform, Packer, CloudFormation • Proven leadership in multidisciplinary delivery teams • Skills in Databases: MongoDB/Atlas, Messaging: Kafka, Observability: Prometheus, Grafana, Splunk • Experience of working in a DevOps environment - favouring and implementing Continuous Integration & Deployment over manual processes. • Experience of designing, implementing, securing and supporting Unix/Linux based platforms (ideally RHEL More ❯
with AWS cloud infrastructure • Deep understanding of IaC tools: Terraform, Packer, CloudFormation • Proven leadership in multidisciplinary delivery teams • Skills in Databases: MongoDB/Atlas, Messaging: Kafka, Observability: Prometheus, Grafana, Splunk • Experience of working in a DevOps environment - favouring and implementing Continuous Integration & Deployment over manual processes. • Experience of designing, implementing, securing and supporting Unix/Linux based platforms (ideally RHEL More ❯
/KLM for mobile Device Management is a plus. A working knowledge or experience with systems and security tools such as: ACAS (Nessus), Veeam, IQ-Core, Stratodesk, Trellix ePO, Splunk, and IIS Web Servers is a plus. Knowledge of Automating of server deployments, processes, provisioning is a plus. PHYSICAL DEMANDS: The physical demands described here are representative of those that More ❯
complex systems to diverse stakeholders. IAT Level II certification (Security+ or equivalent) AWS Certified Security Specialty SCS-C02 Preferred Qualifications Experience in the Intelligence Community (IC) or classified environments. Splunk Enterprise Certified Admin Familiarity with infrastructure as code tools (e.g., Terraform, Ansible). Experience implementing zero trust architectures or secure enclave strategies. Echelon Services LLC is an Equal Opportunity Employer. More ❯
with AWS cloud infrastructure • Deep understanding of IaC tools: Terraform, Packer, CloudFormation • Proven leadership in multidisciplinary delivery teams • Skills in Databases: MongoDB/Atlas, Messaging: Kafka, Observability: Prometheus, Grafana, Splunk • Experience of working in a DevOps environment - favouring and implementing Continuous Integration & Deployment over manual processes. • Experience of designing, implementing, securing and supporting Unix/Linux based platforms (ideally RHEL More ❯
/Unix systems administration combined with strong SQL skills and proficiency in scripting languages such as Python or Java.* Demonstrated experience with monitoring and observability tools including Prometheus, Grafana, Splunk, Geneos, OpenTelemetry or Corvil is highly desirable.* Familiarity with cloud platforms as well as containerisation technologies like Kubernetes or Docker alongside CI/CD pipeline management is important for this More ❯
Oracle SQL, Mongo, Postgres o Know your way around Linux and Windows command lines, e.g. Bash and PowerShell o Monitoring large systems using technologies such as Grafana, Prometheus, ELK, Splunk o Experience of working in Agile teams, and the tooling that supports it, e.g. Atlassian o Diagnosing and troubleshooting application issues resulting in service outages o Troubleshooting skills across different More ❯
in two or more of the following domains: • Network monitoring protocols/methods such as SNMP, NetFlow, and Syslog. • Implementation/Administration of one or more Network Management Systems (Splunk, CA/Broadcom Product Suite, BMC Remedy, IPAM, Infoblox, ownCloud). • Networking principles and systems functionality, with the ability to troubleshoot OSI layers 1-7 throughout a COTS environment. • Linux More ❯
strong technical background in security engineering and federal compliance. Strong understanding of security principles, best practices, frameworks, and techniques. Proficient with security tools and technologies, including SIEM platforms (e.g., Splunk, ArcSight), vulnerability scanners (e.g., Nessus, Qualys), endpoint protection (e.g. ESS, Tellix), and cloud security in AWS, Azure, and hybrid environments. Proficiency in scripting languages (Python, PowerShell, Ansible) for security automation More ❯
initiatives. Knowledge of NIST guidance (SP 800-37, 800-53, 800-161) and JSIG guidance. Hands-on risk assessment experience that incorporates system/mission requirements and operation constraints. Splunk Experience to enhance your threats detection capabilities. Other Requirements: Must have an active Secret clearance with the ability to obtain a Top Secret with SCI eligibility or have an active More ❯
strong technical background in security engineering and federal compliance. Strong understanding of security principles, best practices, frameworks, and techniques. Proficient with security tools and technologies, including SIEM platforms (e.g., Splunk, ArcSight), vulnerability scanners (e.g., Nessus, Qualys), endpoint protection (e.g. ESS, Tellix), and cloud security in AWS, Azure, and hybrid environments. Proficiency in scripting languages (Python, PowerShell, Ansible) for security automation More ❯
initiatives. Knowledge of NIST guidance (SP 800-37, 800-53, 800-161) and JSIG guidance. Hands-on risk assessment experience that incorporates system/mission requirements and operation constraints. Splunk Experience to enhance your threats detection capabilities. Other Requirements: Must have an active Secret clearance with the ability to obtain a Top Secret with SCI eligibility or have an active More ❯
improvement programs, providing operational management and delivering fully or co-managed SOCs off and on-prem, they continue to offer cutting edge provision within this space. As a Senior SPLUNK Consultant, you will guide enterprise organisations through consultative reviews, ensuring their SIEM and wider technologies are operating as effectively as possible whilst ensuring People and Process are similarly proficient. Main … documentation Assess existing threat monitoring rules with a focus on changing threat landscape and technologies Document appropriate detection, containment and response strategies to meet business needs Pre-requisites: Experienced Splunk Engineer/Splunk Consultant with significant knowledge of Splunk technology Consistent experience from within the cyber security industry Ability to write Splunk Searches Ability to write Splunk TAs for applications … and middleware Experience of Splunk Enterprise Security Strong scripting experience - Python (preferred), Bash, Perl, Shell, VBA Relevant knowledge of other cyber technologies such as firewalls, IDS/IPS or proxies Strong communication and documentation skills Developing SIEM use cases is a strong advantage Further info: Competitive Basic, Bonus and Flex bens Remote working UK. Various office locations To apply: Please More ❯
SCDIT is seeking a skilled SPLUNK Engineer to join our dynamic team. The Splunk engineer is expected to use Splunk software in his/her everyday job for searching, monitoring, and analyzing machine-generated data. Splunk is being used for metrics, diagnosing problems, and pulling data from repositories on our servers from tools such as CASPORT, LATTEART, JIRA, and CONFLUENCE. … This data is being assembled into dashboards. Role Responsibilities: Administer Splunk clusters Upgrade the tool when required API data calls IAVA support CentOS7 to RHEL8 upgrade Moving to AWS Pulling logs for servers Creating dashboards and briefing material using Splunk data Role Requirements: Scripting Experience (python etc.); pulling data from tools via RestAPI 7-10 years of experience. Candidates will … be considered for DevOps and Splunk multi-role if they possess the skills. Required Clearance: Candidate must have a TS/SCI polygraph clearance Pay Range: $202,000-$215,000 SCD Benefits: An established, family-owned and operated company that cares about your continued career growth and happiness. Opportunities for advancement. Work/life balance. 100% company-paid Health, Dental More ❯