Cyber Security Specialist

This is a remote position.

We are looking for a Cyber Security Specialist Splunk for our organization.

Introduction

This is a request for a proposal for services to assist our client s Cyber Defense Center (CDC) in a program activity starting latest w2423. The details and scope of this request are outlined in the following sections.

General Background and Strategic Reasoning

To support the enhancement of the Cyber Defense Center the program Visor has been started. A Roadmap for growth and maturity has been developed and the scope of this assignment is to support the program and work on increasing the cyber security capabilities and the monitoring coverage.

Requirements

Description Scope and Implementation

Based on the current Roadmap for the Visor program the following activities are expected:

• Define response plans together with our organization for new areas added for monitoring.
  
• Work on how to visualize KPIs and follow up with management.
  
• Onboard new log sources to SIEM
  
• Define detection rules for new areas added.
  

The activities and corresponding deliverables are expected to be started in w2423 and to be performed and delivered during 2024 alternatively 2025 end of Q2. All deliverables should be aligned with our organization s best practices.

Implementation

• Together with our proposed response plans for new areas.
  
• Create dashboards for KPI etc.
  
• Log onboarding to SIEM.
  
• Development of detection rules in SIEM.
  
• Work together with our organization on adapting the Incident Response process for new areas.
  

Project Deliverables

• Documentation of response plans.
  
• Dashboards for KPI s.
  
• Log onboarding and documentation related to that.
  
• Detection rules in SIEM.
  
• Incident Response process for new areas.
  
• Incident response plans for new areas.
  

Prerequisites to Being Awarded This Business

• The consultant shall have deep knowledge about cybersecurity for IT and preferably also for OT.
  
• The consultant shall have deep knowledge of and with development experience in SIEM (Splunk) and preferably also knowledge about Armis.
  
• Experience and competence of individuals assigned to the project must be provided for review before startup.