Sr. Cribl Data Engineer | Remote, USA

View full description

Requirements:

• 2+ years professional experience managing and maintaining observability platforms.
• 1+ years experience as a Splunk Administrator
• 2+ years experience as Cribl Administrator
• Expert-level knowledge of Splunk Enterprise Security
• Experience with installing and configuring Splunk CORE and Splunk Enterprise Security
• Knowledge of security logging for Linux, Windows, major EDRs, Firewalls, & Active Directory.

Responsibilities:

• Act as a point of escalation for other Engineers and provide guidance and mentoring.
• Assist with client transition and onboarding serve as primary point of contact for Managed Security Service clients.
• Implement, configure, and maintain SIEM software and appliance-based products in large enterprise and Government environments.
• Develop, deploy and tune SIEM content such as correlation rules, dashboards, reports and models.
• Provide escalation support to Tier 1 for Authorized Support Customers, following processes and interacting appropriately with both customers and partners when required.