Information Security Engineer

Information Security Engineer Remote 12 MonthsWe are seeking a candidate to help us grow and improve our Cybersecurity Ops SIEM Engineering team. Our team handles the end-to-end process of onboarding a variety of log sources to the Splunk based SIEM. This function interfaces with many different teams and requires both a wide and deep understanding of several different information technology and cybersecurity concepts and how they function and apply to a corporate enterprise environment. The candidate should have an established background in information security and should have experience with both the configuration and integration of security logs to Splunk in a medium to large organization. The candidate will be assisting the US Cybersecurity Engineering Team in the organization's migration to Splunk Cloud. This entails the configuration of existing log sources using Splunk Universal Forwarder agents and re-configuration of legacy syslog based to point to newly deployed CRIBL ingestion layers. This implies coordinating Change tickets, validating and documenting changes including tracking and reporting of efforts. The candidate will be assisting in the organization's migration to a Splunk Cloud environment which requires experience in a multitude of concepts:3-5 years of experienceBilingual in English/SpanishConfiguration of Security logs on multiple sourcesUnderstanding of Firewall and Network conceptsValidation of Security logs in Splunk SIEM/CRIBLRecognizing and identifying issues and creative problem-solving solutionsDesigning, implementing, and executing testing procedures and documentation/reportingCommunicating effectively across several different teams and entitiesEffective communication as to the status of weekly, monthly, and quarterly project deadlines and deliverablesEffective, precise, and detailed documentation in regard to the SIEM integration of log sources