Specialist, Architecture

About the Role

The Senior Splunk Engineer will be a member of the SecOps Technology Engineering team responsible for the Splunk SIEM and SOAR platforms along with other technology supporting Global Cybersecurity Operations. The team partners with IT Infrastructure teams in end-to-end deployment of security technologies across the firm. The role involves the architectural design and technical support for SIEM and SOAR platform infrastructure, Splunk Phantom, and AWS.

Key Responsibilities

• Engineering leadership and support for existing and future SIEM and SOAR technology (Splunk ES, Phantom, etc.).
• Leading the continued technical enhancement of security platforms.
• Supporting the identification, development, and implementation of new detections and use cases.
• Leading the continued evolution of automation and orchestration across the platform.
• Training and developing other members of the Logging and Operations team, as well as other members of the engineering function.
• Supporting a culture of individual self-improvement whereby staff are expected to maintain subject matter expertise within their area of focus and within the realm of cybersecurity more broadly.
• Taking a leading role in the engagement of Global Businesses and Functions, driving global uplift in cybersecurity awareness.
• Collaborating with various layers of management across Cybersecurity and other IT teams to develop solutions that protect the organization.
• Designing and driving the implementation of new service offerings, capability uplifts, and process improvements to protect the bank for a continuously changing threat landscape.

Requirements & Tech Stack

• Splunk SIEM and SOAR platforms.
• Splunk Phantom.
• AWS platform services.
• Splunk ES.
• RHEL/AL2.
• Windows Server.

Qualifications

• Proven experience within the Technology sector with knowledge of enterprise-level SIEM technology and logging frameworks.
• Extensive experience in deploying, configuring, upgrading, and administering Splunk clusters at scale.
• Ability to perform installation, configuration management, capacity planning, license management, data integration, data transformation, field extraction, event parsing, data preview, and application management of Splunk.
• Scripting/Programming experience with Python, Bash, or Powershell.
• An ability to communicate complex and technical issues to diverse audiences.
• Self-motivated and possessing of a high sense of urgency and personal integrity.
• A team-focused mentality with the proven ability to work effectively with diverse stakeholders.
• Ability to orchestrate, manage, and successfully implement major procedural and technological change within a complex global organization.
• Formal education and advanced degree in Information Security is mentioned as a qualification.