Address
SalarySplunk Engineer
- April Start - 12 months contract with great extensions!
- Location - ACT - Flexible/Remote work arrangements can be negotiated
- Australian Citizens with current Baseline clearance
About the Role:
As the Splunk Engineer, you will be responsible for maintaining the overall Splunk architecture and the effectiveness and efficiency of the SIEM. You will work closely with other members of the SOC and Cyber security team.
Key Responsibilities include:
- Manage Splunk Cloud environment application updates, dashboarding, integrations and health checks
- Onboard new data/log sources
- Run queries and searches to inform SOC requests
- Perform data quality and data model assessments on a periodic basis
- Maintain Heavy Forwarding logging infrastructure
- Maintain existing on premise Splunk enterprise and SOAR - including patching, application updates integrations and health checks
- Investigate technologies to assist with vulnerability analysis and remediation efforts
- Stay up-to-date with the latest security threats, vulnerabilities, and trends in the cybersecurity industry.
- Bachelor's degree in Cyber Security, Information Technology, or related field. Relevant certifications such as Splunk User, Core, Architect, ES and SOAR are preferred.
- 3+ years of experience in cybersecurity Knowledge of common cybersecurity threats, vulnerabilities, and attack vectors.
- Experience with Splunk Enterprise Security, Splunk Cloud and Splunk SOAR
- Experience with case, incident and ticket management Experience with ITSM tools such as ServiceNow and Atlassian
- Ability to work in a fast-paced, high-pressure environment.
Initial term: 12 months
Extension: 2x12 months extension options
Clearance: Australian Citizens with current Baseline security clearance
Submission deadline: 1/03/2024
If you are interested in finding out more about the role, apply today or contact Varsha on 02-6257 8888 for a full assignment brief.
