Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Мало
$125к-150к/год
$140к$170кмедиана$210к
По похожим ролям (49) ~ $170к/год
На СНГ рынке: $6.7к/мес ($3.6к - $12к)
74
Хорошая вакансия
развернуть
Обязанности для старшего специалиста описаны чётко: работа с SIEM и наставничество. При этом формат работы у федерального заказчика указан противоречиво, что оставляет вопросы по фактическому месту работы.
Senior Splunk Engineer (SIEM/Cybersecurity): Engineering, deploying, and maintaining Splunk-based SIEM infrastructure and integrations for a federal client with an accent on Splunk Enterprise Security, Risk-Based Alerting, Linux administration, and enterprise data connectivity. Focus on optimizing Splunk components, developing customized technical add-ons, troubleshooting complex security systems, and mentoring junior engineers.
Location: Remote; work is also described as primarily performed in an office/warehouse setting, and the role supports a federal client.
Salary: $125,000–$150,000 annually; final offer depends on location, skillset, and experience.
Company
hirify.global is a holding company with subsidiaries providing business, health, infrastructure and engineering, mission optimization, technology, and transportation services to federal government and commercial clients.
What you will do
Engineer, deploy, optimize, and maintain the Splunk-based SIEM infrastructure, including apps, reports, alerts, dashboards, searches, and data-source connections.
Develop customized technical add-ons, integrations, interfaces, and internal and external SIEM components using SDLC methodologies and business best practices.
Increase the efficiency of the infrastructure and connect additional enterprise data sources to Splunk Enterprise.
Manage and monitor Linux-based on-premises server infrastructure, including configuration and software upgrades.
Develop change-management plans, lead prototyping and testing of new features, and recommend improvements to system operations and data availability.
Mentor Tier II technicians and junior security architects and engineers, lead technical discussions, and provide training recommendations.
Requirements
Ability to obtain, maintain, and access classified information at the Public Trust level.
Certified Splunk Architect certification.
Senior-level mastery of SIEM front-end and back-end operations and configurations, including interoperability with other security tools.
Extensive knowledge of Splunk Enterprise Security, CIM compliance, and Splunk Risk-Based Alerting.
Extensive knowledge of Linux-focused back-end engineering and administration, system data flows, network interconnections, and security event correlation.
Excellent troubleshooting, analytical, critical-thinking, communication, organizational, and multitasking skills, with the ability to work autonomously with minimal supervision.
Bachelor’s degree in Computer Science, Management of Information Systems, Cybersecurity, or a related mathematics or science discipline.
At least six years of experience in IT infrastructure, networking, architecture, administration, or security; six years of Splunk expertise; and at least three years of experience with large-scale enterprise solutions.
Experience with Splunk premium apps such as Enterprise Security and with architecting, developing, deploying, and configuring customized technical add-ons.
PERL, Linux shell scripting, and Regex experience.
Culture & Benefits
Full-time employment with medical, dental, and vision coverage.
401(k) with immediate vesting, company life insurance, short- and long-term disability coverage, and basic life/AD&D benefits.
Paid time off, federal holiday observance, and employee assistance and legal-aid programs.
Family planning and fertility assistance.
Professional development, training, and development opportunities.
Drug-free workplace and equal employment opportunity practices, including disability and veteran inclusion.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →