Currency

SIEM Engineer (Splunk)

Security

SIEM Engineer (Splunk)

Security

-, Warszawa

Fujitsu

Full-time
B2B
Senior
Remote

Tech stack

    AWS

    advanced

    Windows

    advanced

    Powershell

    advanced

    Azure

    advanced

    SIEM

    advanced

    Linux

    advanced

    MITRE ATT&CK

    advanced

    Google Cloud

    advanced

    Python

    advanced

    analysis skills

    advanced

Job description

SIEM Engineer (Splunk)


Location: Offices are in Lodz & Katowice, but work can be done 99% remotely

 

As SIEM Engineer, you will be responsible for:

  • Supporting customers with deployments of Splunk
  • Configuring, maintaining and troubleshooting Sentinel environments 
  • Preparing reports presenting risks and vulnerabilities in the environment
  • Periodical review of systems configuration
  • Looking for continuous improvements to make sure that systems are as secure as they can be
  • Participating in mitigation of zero-day vulnerabilities
  • Proactively suggesting the best way to increase the overall security score of the environment
  • Creating queries and SIEM use cases
  • Working with other teams to solve the security-related problem


Requirements:

  • hands-on experience with Splunk
  • Experience in architecting, managing deployment, and operationalization of SIEM in client environments
  • Experience in working with various technical departments to enhance threat detections of deployed SIEM solutions
  • Solid technical knowledge of Linux and Windows
  • Excellent root cause analysis skills
  • Understanding of MITRE ATT&CK and other security methodologies
  • Experience in any of the scripting languages (Powershell, Python, etc.)
  • Hands-on experience in cloud services from any major provider (AWS, Azure, Google Cloud)


Additionally, a great asset will be:

  • Previous experience with Splunk, Elasticsearch, QRadar, or other SIEM tools
  • Security-related certificates, such as CompTIA Security +, CySA+, etc.
  • Vendor certificates such as AZ-104, SC-200, AZ-500, MS-500, AWS Practitioner, etc.
  • Other certificates which prove knowledge in the field of security and technology administration


What do we offer:

  • You will work in a collaborative, close-knit team
  • You will be able to learn a lot and develop your knowledge in IT Security
  • You will have the possibility to participate in various vendor events organized only for business partners
  • You will have access to an online learning platform with all the latest tech training
  • You will be encouraged to work smart and work in your own way
  • You will be a part of a leading global technology business
  • You will be trusted to deliver your work
  • You will get an extensive benefits package supporting your work-life balance, health, and comfort to work from home
  • You will be able to work with top technology providers in the industries
  • You will be first on the frontline to prevent any breaches to happen


Published: 13.12.2023
Office location
ADVERTISEMENT: Recommended by Just Join IT