Position: Splunk Specialist (Germany)
Company: German Cybersecurity company
Experience required: 3y
Category: Sysadmin
English level: upper
Published: 2020-08-01T00:00:00+03:00

As a Splunk Specialist you will contribute to our cybersecurity program. You will be involved in exciting projects in our company and our worldwide business network.
You should possess a strong background of cybersecurity operations, the evolving threat landscape, as well as a clear understanding of its relevance to financial services.

Responsibilities:
- Splunk administration tasks including dashboard creation, maintenance, patching, account provision and data capture optimization and contribute to the fulfillment of technical projects, including technical computer security issues, policies, and procedures at the network and host level.
- Collect the end to end monitoring requirements for end user behavior, application monitoring, infrastructure, log monitoring, and database schema.
- Directly contribute to continuous improvement efforts as it relates to people, process and technology by providing actionable output from operational work to drive maturity enhancements in the detection, reporting and remediation of threats.
- Design and implement effective data processing architectures and implement design improvements in collaboration with data scientists and infrastructure architects.
- Establish monitoring dashboard for status, analytics, performance and notification/alerting.
- Summarize large amount of metrics into meaningful graphs and reports and create release reports.
- Working knowledge of common platforms including Unix, Linux and Windows.
- Create and maintain common and integrated standards with respect to logging, latency, troubleshooting, and monitoring.
- Work with stakeholders and management to gather functional requirements for Security Operations tooling and workflow improvements to enable application owners’ resolution of application vulnerabilities.

Requirements:
- At least 3-5 years of experience in Information Security Operations including working with Splunk Enterprise Security
- Degree in Cybersecurity, Computer Science, Information Systems, a related field, or equivalent work experience
- Knowledge of the threat landscape, adversary tactics, techniques, and procedures (TTP), general attack stages, kill-chain and attack types
- Strong background in IT with a clear understanding of the challenges of information security and good background in Data Protection & GDPR
- Excellent analytical and problem-solving abilities to identify and fix security risks
- Excellent communication and presentation skills to build understanding and awareness of security issues throughout the organization
- Good team working skills to develop security solutions in collaboration with the team
- Knowledge of Windows, Linux and Unix as well as experience with products in the field of penetration testing (Kali, etc.)
- Security certifications are a plus (e.g. GCIH, GCIA, ECIH, CEH, OSCP, OSCE, GCFA, CSIH, CISSP) and/or technical certifications (e.g. CCNP, MSCE)
- Upper-Intermediate written and spoken English 

The company offers (if relocation):
- Medical and social insurance for all family members
- German language courses
- Visiting conferences and seminars (up to 3 times a year) through the European Union
- Obtaining professional certification on annual basis
- Assistance with registration at all instances, appointment of all meetings and support in the filling of all official visa documents. Covering all consular fees
- Covering relocation expenses and providing corporate accommodation for the first three months