TC - CS - CDR - Splunk - Manager

Manager (CTM – Threat Detection & Response) – Splunk

Key Responsibilities:

• Lead the design, implementation, and management of Splunk solutions (On-prem and Cloud), with a focus on the Enterprise Security (ES) App.
• Collaborate with clients to understand their security requirements and translate them into effective Splunk use cases.
• Oversee the installation, configuration, and optimization of Splunk instances, including indexers, forwarders, and search heads.
• Conduct regular assessments of clients' Splunk environments to identify areas for improvement and implement necessary enhancements.
• Provide technical guidance and support to clients during the implementation and post-implementation phases.
• Train and mentor junior team members on Splunk best practices and advanced features.
• Stay updated on the latest developments in Splunk and cybersecurity to ensure the highest level of expertise and service delivery.
• Manage project timelines, budgets, and resources to ensure successful completion of implementation projects.
• Work closely with SOC teams to ensure seamless integration and operation of Splunk solutions within their workflows.
• Knowledge in SOAR and EDR, work with these teams to ensure integration and optimization through automation.
• Experience with integration and optimization of logs from cloud environments (AWS, GCP, and Azure).
• Ensure effective communication and coordination between project stakeholders, including clients and internal teams.
• Participate in and manage the preparation of responses to Requests for Proposals (RFPs), including technical solution design and project planning.
  

Mandatory Skills and Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 8+ Years’ experience in Cyber Security with a good of knowledge in network architecture, Cloud Security and Microsoft technologies
• Extensive experience with Splunk, including implementation and management of the Enterprise Security (ES) App.
• Strong understanding of security operations, threat detection, and incident response.
• Hands-on experience with Splunk configuration, including indexers, forwarders, and search heads.
• Experience with SOAR and EDR solutions.
• Strong project management skills, with the ability to manage multiple projects simultaneously.
• Effective communication and interpersonal skills to interact with clients and internal teams.
• Experience in preparing and responding to RFPs.
• Experience working closely with SOC teams to ensure effective security operations.
• Experience with configuration and integration of cloud environments (AWS, GCP, and Azure).
• Splunk certifications such as Splunk Certified Architect or Splunk Certified Consultant.
  

Preferred Qualifications:

• Master’s degree in Cybersecurity, Information Technology, or a related field.
• Experience with other SIEM solutions and cybersecurity tools.
• Knowledge of scripting languages such as Python or PowerShell for automation and integration tasks.
• Familiarity with regulatory requirements and industry standards related to cybersecurity.
  

EY | Building a better working world