Splunk Engineer Consultant

Summary

Join True Zero Technologies, a veteran-owned small business recognized for its excellent workplace, as a Splunk Consultant. You will be part of a team maintaining various clients' Splunk instances, focusing on data onboarding, content development, reporting, and visualizations. This role requires extensive Splunk experience, relevant certifications, and teamwork skills. As a consultant, you'll have access to True Zero's knowledge base, collaborative community, and professional development resources. True Zero offers a competitive salary and benefits package, including comprehensive medical coverage, paid time off, 401k matching, and more.

Requirements

• US Background Check Required
• Splunk Consultant Certification
• Heavy Splunk ES Experience
• Experience with RBA

Responsibilities

• Develop and Implement Actionable Alerts and Workflow for Splunk as a SIEM (Security Information & Event Management) tool
• Develop and Implement Apps & Knowledge Objects (KO) like Dashboard, Reports, Data Models
• Work with the Splunk Architect/Admin to promote private KO to Global KO
• Assist, and/or train CISO Splunk Engineering team on Data Lifecycle
• Support Assist, train, and/or host workshops CISO teams and analysts on Searching and Content Development
• Develop and implement automation to improve efficiency of CISO workflows using Splunk
• Assist in development of advanced security use cases in Splunk
• Develop risk rules and risk incident rules to correlate and alert to significant cyber events
• Develop custom dashboards specific to RBA (Risk Based Alerting) to highlight risk detail, health analysis and risk suppression
• Configure incident response and remediation workflows for ES around notable events (RBA or otherwise alerted)
• Develop custom machine learning (ML) models to support anomaly-detection based augmentation of alerting
• Work with numerous stakeholders to implement & maintain event logging from various operating systems, applications, identity providers, network infrastructure, and cloud service providers. Understanding of network protocols, operating systems, applications, and device event telemetry

Preferred Qualifications

Candidates with backgrounds supporting federal customers is a plus

Benefits

• Competitive salary, paid twice per month
• Best in class medical coverage
• 100% of medical premiums covered by True Zero
• Company wide new business incentive programs
• Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)
• 3 weeks of PTO starting + 11 Paid Holidays Annually
• 401k Program with 100% company match on the first 4%
• Monthly reimbursement of Cell Phone and Home Internet costs
• Paternity/Maternity Leave
• Investment in training and certifications to broaden and deepen your technical skills