Information Security Engineer

Information Security Engineer Remote 12 Months

We are seeking a candidate to help us grow and improve our Cybersecurity Ops SIEM Engineering team. Our team handles the end-to-end process of onboarding a variety of log sources to the Splunk based SIEM. This function interfaces with many different teams and requires both a wide and deep understanding of several different information technology and cybersecurity concepts and how they function and apply to a corporate enterprise environment. The candidate should have an established background in information security and should have experience with both the configuration and integration of security logs to Splunk in a medium to large organization. The candidate will be assisting the US Cybersecurity Engineering Team in the organization's migration to Splunk Cloud. This entails the configuration of existing log sources using Splunk Universal Forwarder agents and re-configuration of legacy syslog based to point to newly deployed CRIBL ingestion layers. This implies coordinating Change tickets, validating and documenting changes including tracking and reporting of efforts. The candidate will be assisting in the organization's migration to a Splunk Cloud environment which requires experience in a multitude of concepts:

• 3-5 years of experience
• Bilingual in English/Spanish
• Configuration of security logs on multiple sources
• Understanding of firewall and network concepts
• Validation of security logs in Splunk SIEM/CRIBL
• Recognizing and identifying issues and creative problem-solving solutions
• Designing, implementing, and executing testing procedures and documentation/reporting
• Communicating effectively across several different teams and entities
• Effective communication as to the status of weekly, monthly, and quarterly project deadlines and deliverables
• Effective, precise, and detailed documentation in regard to the SIEM integration of log sources