Splunk Data Administrator - SRKay Consulting Group

Apply For Job

Job Description

Key Responsibilities

Data Onboarding

Work with users requesting new data sources
Document existing and newly ingested data sources.
Design and manage input for Splunk universal and heavy forwarders to capture data
Manage log source parsing/formatting, event line breaking, timestamp extraction
Deploy changes to production
Manage Splunk Configuration files
Install and manage Splunk apps
Assist on the integration and automated onboarding of application logs.

Person Specification

Degree holder in Computer Science or related disciplines, or appropriate extensive experience.
At least 2 years experiences onboarding data on Splunk environment.
Obtained at least Splunk Fundamental 2/3 or various Splunk E-learnings
Certified Splunk Enterprise Security Administrator or Splunk Enterprise Admin is highly preferred.
At least 5 years experiences in Information Security
Have a good knowledge of the business, analytics, data visualization and modelling.
Strong problem-solving skills and fast learner.
Liaison skill & teamwork, passion & commitment mentality
Good interpersonal and communication skills.
Fluent in spoken and written English

Technical Requirements

Experience working on different data input types (file and directories, network data, script output, Linux and windows logs, DB connect, HTTP etc.)
Broad knowledge and understanding of Network data, Syslogs and able to troubleshoot data ingestion issues.
Broad knowledge and understanding of Computer operating systems (Windows and Unix/Linux)
A basic understanding of directory and identity management services.
A basic understanding of cloud computing and infrastructure.
A basic understanding of server and service operations.
A general understanding of Attacker tools such as Remote exploit kits, Remote Access Tools etc.
A high level of understanding of Attack taxonomy such as MITRE ATT&CK, Lockhead Martin Kill chain, Diamond model etc.
A development/programming background is a big plus.
Experience writing Regex (Regular Expression) is a big plus