Senior Cybersecurity Specialist - Splunk Architect

Key Responsibilities:Administer and enhance Splunk and its applications, including the development of new features for specialized tasks. Integrate Splunk with diverse legacy data sources to ensure seamless data flow. Adapt swiftly to learn and implement new SOC technologies from various vendors. Collaborate with application and infrastructure teams to establish best practices for utilizing Splunk data and visualizations effectively. Design and implement solutions utilizing Microsoft security technologies such as Azure Cloud Access Security Broker, Office 365 Advanced Threat Protection, and Microsoft Defender ATP. Oversee the deployment and support of vulnerability scanning engines, collaborating with Engineering, SOC, and Incident Response teams to document and mitigate vulnerabilities within agreed SLAs. Create and manage watchlists to detect Indicators of Compromise (IoCs) and proactively identify new threats. Assess client needs, design tailored solutions, and implement them efficiently. Act as the primary responder for Managed Security customer systems, ensuring timely resolution of client configuration issues. Work collaboratively with SOC team members to enhance service quality through operational initiatives. Proactively fine-tune detection mechanisms to minimize false positives and improve the operational processes. Develop content for SOC technologies, such as use cases for Splunk, in collaboration with the SOC team.