Position: Splunk Consultant
Company: Boxhigher
Experience required: 2y
Category: Security
English level: fluent
Published: 2022-09-01T00:00:00+03:00

**Protirus **deliver security programs for a large and diverse customer base. Our customer list includes some of the world’s largest organisations, and our constant aim is to ensure we provide them unparalleled services and products. We believe that can only be achieved in an environment where creativity, collaboration, innovation, flexibility and trust are the foundations to the way of working.

Protirus’s Consulting Services provide Service Design, Program Management, Deployment & Integration and Operational Optimisation services to customers, carrying out projects from start to finish.

Additionally, our Development arm is a crucial contributing element to the Consulting Services allowing Protirus to provide custom solutions to customer requirements, subsequently delivering cutting edge and comprehensive projects to our customers.

T**his is an initial 4 month fixed terms hybrid employment role of 40 hours a week. There may be the occasional need to attend meetings onsite (assume a couple of times per month may be required).** 


**ONLY UK BASED**


**Experience**

We are looking for a Splunk Engineer, with SIEM development experience within a financial organisation, or similar organisation where significant levels of internal staff security monitoring of applications is required.

**Required**

-Self-motivated and organised person
-High degree of (hands-on) technical guidance & vision with broad subject matter expertise in security technologies, specifically SIEM and UEBA.
-Excellent ability to execute where information is ambiguous, utilising 
-Excellent analytical and problem solving skills
-Career proven history of leading developments within the Splunk Enterprise / Security technology toolsets
-Strong knowledge of Splunk architecture, distributed components (indexer clusters, forwarders, search head clusters, deployment servers, DMCs )
-Strong knowledge of Splunk Enterprise Security at administration and use case level
-Understanding of the Common Information Model 
Strong knowledge of data models, enrichment and automation
-Experience of establishing secure API connections to internal systems
-Experience of developing ‘ETL’ workflows to add new data into Splunk
Strong interpersonal skills; role will require engagement with a varied and global internal stakeholder base
-Documentation skills in order to provide high quality documentation for internal customers and technical support teams
-Openness to learning and managing additional Information Security technologies as business requirements change
-Strong knowledge of security network architectures (e.g. Firewalls, DMZ, proxies, DNS, web and mail servers) and the principles of networks
-Exposure to cloud technologies, AWS, Azure and SaaS based security solutions Ability to think architecturally at ‘big picture’ and able to translate this into practical security implementation


**Job Types: Fixed term contract, Temporary contract**
**Contract length: 4 months**