Sr. Splunk Engineer
Job Summary
The Sr. Splunk Engineer operates within the 24x7x365 Security Operations Center as part of the Advanced Fusion Center (AFC) team. This role involves managing and maintaining security systems across internal and client environments while providing technical leadership. The engineer will collaborate with management and solution architects to resolve high-profile client configuration issues.
Responsibilities
- Manage and maintain security systems within the AFC team
- Resolve high-profile client configuration issues
- Provide technical leadership and project oversight
- Mentor technical staff and support pre-sales scoping
Required Skills
- 6+ years related experience
- 4+ years Splunk architecture
- Proficiency in Python/Shell/Java
- Strong knowledge of security frameworks and cloud architecture
- Excellent communication and technical writing skills
Job Details
Position Responsibilities:
- Work within the Optiv Security 24x7x365 Security Operations Center as a member of the Advanced Fusion Center (AFC) team.
- Manage and maintain security systems across internal and client environments.
- Work closely with Management, Solution Architects, and Principal Security Engineers to complete high-profile, critical services for existing AFC clients.
- Serve as a primary responder for AFC customer systems, taking ownership of client configuration issues and tracking through resolution.
- Provide mentorship to other technical staff members.
- Provide technical assistance in scoping and other pre-sales activities.
- Take technical leadership on client projects; oversee and guide work performed by other technical staff members.
Qualifications & Requirements:
- 6+ years of related work experience (Bachelor's degree preferred).
- 4+ years of technical architecture experience with Splunk.
- Experience working with Cribl and AWS preferred.
- Experienced with multiple security concepts and methods, such as vulnerability assessments, data classification, privacy assessments, incident response, security policy creation, enterprise security strategies, architectures, and governance.
- Strong understanding of networking (TCP/IP, OSI model), operating system fundamentals (Windows, Linux), and security technologies (endpoint security, DLP, firewalls, IDS/IPS, etc.).
- Understanding and experience working with application programming/scripting languages (Python, Java, Perl, Shell), as well as Regular Expressions.
- Experience with cloud-based service architecture.
- Understanding of regulatory requirements and compliance issues (PCI DSS, GLBA, GDPR, etc.).
- Understanding of various security frameworks and/or methodologies (e.g. MITRE ATT&CK, NIST, etc.).
- Strong written and presentational skills; ability to communicate complex messages to diverse audiences.
- Experience with enterprise architecture and working as part of a cross-functional team.
- Strong interpersonal skills and ability to work independently with minimal direction.
- Technical writing experience.