GMS-Senior-Technology Specialist-Splunk SIEM TechOps

pspan style=font-family:Arial, Helvetica, sans-serifspan style=font-size:11.0pxAt EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. /span/span/pp /pp /pp /pp /ppspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptstrongCMSTDR Senior (TechOps)/strong/span/pp /pp /ppspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptstrongKEY Capabilities:/strong/span/pp /pulli style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptExperience in working with Splunk Enterprise, Splunk Enterprise Security amp; Splunk UEBA/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptMinimum of Splunk Power User Certification/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptGood knowledge in programming or Scripting languages such as Python (preferred), JavaScript (preferred), Bash, PowerShell, Bash, etc./span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptPerform remote and on-site gap assessment of the SIEM solution./span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptDefine evaluation criteria amp; approach based on the Client requirement amp; scope factoring industry best practices amp; regulations/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptConduct interview with stakeholders, review documents (SOPs, Architecture diagrams etc.)/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptEvaluate SIEM based on the defined criteria and prepare audit reports/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptGood experience in providing consulting to customers during the testing, evaluation, pilot, production and training phases to ensure a successful deployment./span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptUnderstand customer requirements and recommend best practices for SIEM solutions./span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptOffer consultative advice in security principles and best practices related to SIEM operations/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptDesign and document a SIEM solution to meet the customer needs/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptExperience in onboarding data into Splunk from various sources including unsupported (in-house built) by creating custom parsers/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptVerification of data of log sources in the SIEM, following the Common Information Model (CIM)/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptExperience in parsing and masking of data prior to ingestion in SIEM/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptProvide support for the data collection, processing, analysis and operational reporting systems including planning, installation, configuration, testing, troubleshooting and problem resolution/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptAssist clients to fully optimize the SIEM system capabilities as well as the audit and logging features of the event log sources/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptAssist client with technical guidance to configure end log sources (in-scope) to be integrated to the SIEM/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptExperience in handling big data integration via Splunk/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptExpertise in SIEM content development which includes developing process for automated security event monitoring and alerting along with corresponding event response plans for systems/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptHands-on experience in development and customization of Splunk Apps amp; Add-Ons/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptBuilds advanced visualizations (Interactive Drilldown, Glass tables etc.)/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptBuild and integrate contextual data into notable events/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptExperience in creating use cases under Cyber kill chain and MITRE attack framework/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptCapability in developing advanced dashboards (with CSS, JavaScript, HTML, XML) and reports that can provide near real time visibility into the performance of client applications./span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptExperience in installation, configuration and usage of premium Splunk Apps and Add-ons such as ES App, UEBA, ITSI etc/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptSound knowledge in configuration of Alerts and Reports./span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptGood exposure in automatic lookup, data models and creating complex SPL queries./span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptCreate, modify and tune the SIEM rules to adjust the specifications of alerts and incidents to meet client requirement/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptWork with the client SPOC to for correlation rule tuning (as per use case management life cycle), incident classification and prioritization recommendations/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptExperience in creating custom commands, custom alert action, adaptive response actions etc./span/li/ulp /pp /ppspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptstrongQualification amp; experience:/strong/span/pp /pulli style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptMinimum of 3 to 10 years’ experience with a depth of network architecture knowledge that will translate over to deploying and integrating a complicated security intelligence solution into global enterprise environments./span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptStrong oral, written and listening skills are an essential component to effective consulting./span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptStrong background in network administration. Ability to work at all layers of the OSI models, including being able to explain communication at any level is necessary./span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptMust have knowledge of Vulnerability Management, Windows and Linux basics including installations, Windows Domains, trusts, GPOs, server roles, Windows security policies, user administration, Linux security and troubleshooting./span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptGood to have below mentioned experience with designing and implementation of Splunk with a focus on IT Operations, Application Analytics, User Experience, Application Performance and Security Management/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptMultiple cluster deployments amp; management experience as per Vendor guidelines and industry best practices/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptTroubleshoot Splunk platform and application issues, escalate the issue and work with Splunk support to resolve issues/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptCertification in any one of the SIEM Solution such as IBM QRadar, Exabeam, Securonix will be an added advantage/span/lili style=font-family:arial, helvetica, sans-serif;font-size:10.0ptspan style=font-family:arial, helvetica, sans-serif;font-size:10.0ptCertifications in a core security related discipline will be an added advantage./span/li/ulp /pp /ppspan style=font-family:Arial, Helvetica, sans-serifspan style=font-size:11.0pxbEY | Building a better working world /b/span/span/ppbrspan style=font-family:Arial, Helvetica, sans-serifspan style=font-size:11.0px brEY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.  /span/span/ppbrspan style=font-family:Arial, Helvetica, sans-serifspan style=font-size:11.0px brEnabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.  /span/span/ppbrspan style=font-family:Arial, Helvetica, sans-serifspan style=font-size:11.0px brWorking across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.  /span/span/p