Splunk Engineer - Consultant Certified ES Accreditation Required R-00062
Splunk Engineer - Consultant Certified ES Accreditation Required R-00062
Posted on :
27-04-2025
Employer Active
1 Vacancy
Job Alert
You will be updated with latest job alerts via emailValid email field required
Send jobs
Share
Send me jobs like this
Job Alert
You will be updated with latest job alerts via emailValid email field required
Send jobs
Monthly Salary
Not Disclosed
Salary Not Disclosed
Vacancy
1 Vacancy
Posted on :
27-04-2025
Job Description
True Zero Technologies a veteranowned small business was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that said outcomes begin and end with our people and that is what we have built a community of likeminded driven and passionate individuals and innovators who are aligned in a common goal of delivering top tier services to our customers. In 2023 True Zero was recognized as a Best Places to Work in two categories (Prosperous and Thriving $5MM $50MM in gross revenue) and MidAtlantic Region (DC DE MD NC VA WV) and in 2022 was recognized as one of Inc. Magazines Top 5000 Fastest Growing Companies.
The candidate will be part of a team of Splunk Engineers maintaining various clients Splunk instances with a heavy emphasis on data onboarding content development reporting and visualizations. All candidates must possess prior Splunk engineering and administration experience meet the necessary certification prerequisites and work well in a team environment. Candidates with backgrounds supporting federal customers is a plus.
As a TZT consultant the candidate will receive access to the full knowledge base which is driven by the True Zero community as well as the technical backing of the entire PS team. True Zero encourages collaboration and growth through information sharing and knowledge workshops. The candidate will also have access to our internal Slack channel to stay connected with the team as well as the necessary tools to train demo test and grow their professional skills.
Qualification Requirements
- US Background Check Required
- Splunk Consultant Certification
- Heavy Splunk ES Experience
- Experience ingesting logs into Splunk via Cribl is required
- Experience with RBA
- Develop and Implement Actionable Alerts and Workflow for Splunk as a SIEM (Security Information & Event Management) tool
- Develop and Implement Apps & Knowledge Objects (KO) like Dashboard Reports Data Models
- Work with the Splunk Architect/Admin to promote private KO to Global KO
- Assist and/or train CISO Splunk Engineering team on Data Lifecycle
- Support Assist train and/or host workshops CISO teams and analysts on Searching and Content Development
- Develop and implement automation to improve efficiency of CISO workflows using Splunk Assist in development of advanced security use cases in Splunk
- Develop risk rules and risk incident rules to correlate and alert to significant cyber events
- Develop custom dashboards specific to RBA (Risk Based Alerting) to highlight risk detail health analysis and risk suppression
- Configure incident response and remediation workflows for ES around notable events (RBA or otherwise alerted)
- Develop custom machine learning (ML) models to support anomalydetection based augmentation of alerting
- Work with numerous stakeholders to implement & maintain event logging from various operating systems applications identity providers network infrastructure and cloud service providers. Understanding of network protocols operating systems applications and device event telemetry
Were actively searching for talented security and technology practitioners who are ready to experience the True Zero difference. As a True Zero team member youll enjoy:
Competitive salary paid twice per month
Best in class medical coverage
100 of medical premiums covered by True Zero
Company wide new business incentive programs
Contribution Incentives (i.e. white papers blog posts internal webinars etc.
3 weeks of PTO starting 11 Paid Holidays Annually
401k Program with 100 company match on the first 4
Monthly reimbursement of Cell Phone and Home Internet costs
Paternity/Maternity Leave
Investment in training and certifications to broaden and deepen your technical skills
Required Experience:
Contract
Employment Type
Full-Time
Key Skills
Report This Job
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.
