Senior Security Engineer, Splunk

- Serve as a technical authority on SIEM products (Splunk, Cribl) and related technologies. - Conduct research to identify opportunities for adopting best practices and industry standards to optimize SIEM platforms. - Engineer and implement various solutions on SIEM platforms based on business needs. - Establish SIEM platform standards, encompassing data schema, modeling, normalization, monitoring, and alerting processes. - Ensure experience in dashboard creation and reporting as needed. - Utilize AI and ML methodologies to develop contemporary SIEM and data monitoring solutions. - Configure SIEM products using diverse policies, rules, and settings. - Customize SIEM products when out-of-the-box solutions are inadequate. - Develop standard patterns for integrating various systems into SIEM platforms. - Generate diverse reports utilizing SIEM data. - Identify methods to enhance existing baseline processes and configurations. - Produce documentation related to engineering, integration, and processes. - Manage vendor relationships to guide the roadmap, solution design, implementation, and troubleshooting. - Collaborate with key stakeholders to ensure expectations align with requirements. - Conduct proof of concepts (POC) for new features to devise innovative solutions. - Possess knowledge of various applications and systems, including servers, middleware, clouds (SaaS, PaaS, and IaaS), and containers for effective SIEM integration. - Lead proactive system security reviews and assessments of policies, procedures, and systems across distributed networks. - Analyze security risks and controls to address information security challenges, assess strengths and weaknesses, and implement justified solutions. - Provide technical guidance to peers and train new staff within the security team.