Splunk SIEM Consultant at Cognizant in Branchburg, New Jersey

Job Description:

Splunk Consultant with minimum 3-5 years of experience in installation, configuration, development and troubleshooting in Splunk Enterprise and experience working on Splunk Cloud.

• Understand customer’s IT landscape and strategies towards Central logging / SIEM solution

• Assist in deployment of Splunk Forwarders

• On-boarding new data sources for Security log monitoring – (log sources includes network security, end-points, data security devices etc.)

• Field extraction and adherence to Splunk standard data model

• Develop custom dashboards / applications based on user requirements

• Troubleshooting integrated devices for data anomaly, configuration issues, upgrade, etc.

• Knowledge on “Splunk Enterprise Security App” to enable customer's use cases

Required Qualifications:

• Splunk Certified Administrator

• Demonstrable understanding of common enterprise applications especially in Security and Operational experience with any of the following (or related) areas: Network Security, Linux/Unix systems administration, Windows/Active Directory administration

• Knowledge on ISO27001, SOX, SANS CSC 20 and related Security controls – to derive Use cases

• Knowledge on ITSM Process

• (Optional)Worked on any other Industry leading SIEMs like – Qradar, Nitro or ArcSight

 

Splunk Consultant with minimum 3-5 years of experience in installation, configuration, development and troubleshooting in Splunk Enterprise and experience working on Splunk Cloud.

• Understand customer’s IT landscape and strategies towards Central logging / SIEM solution

• Assist in deployment of Splunk Forwarders

• On-boarding new data sources for Security log monitoring – (log sources includes network security, end-points, data security devices etc.)

• Field extraction and adherence to Splunk standard data model

• Develop custom dashboards / applications based on user requirements

• Troubleshooting integrated devices for data anomaly, configuration issues, upgrade, etc.

• Knowledge on “Splunk Enterprise Security App” to enable customer's use cases

Required Qualifications:

• Splunk Certified Administrator

• Demonstrable understanding of common enterprise applications especially in Security and Operational experience with any of the following (or related) areas: Network Security, Linux/Unix systems administration, Windows/Active Directory administration

• Knowledge on ISO27001, SOX, SANS CSC 20 and related Security controls – to derive Use cases

• Knowledge on ITSM Process

• (Optional)Worked on any other Industry leading SIEMs like – Qradar, Nitro or ArcSight