Solution Architect: SEIM (Security Information & Event Mgt)

• Splunk architecture / fundamentals – Foundational knowledge of at least two SIEM and logging products (Splunk, LogRythm, IBM QRadar, Alienvault, McAfee SIEM, ArcSight, Fortinet, SolarWinds etc)
• Experience of Splunk onboarding, transformation, event formats and Common Information Model
• Experience of deploying Splunk architecture in Off-Prem AWS, Azure and On-Prem
• 2+ years Security Solutions Architecture or Enterprise Security Architecture experience
• Cyber Essentials
• Sound professional qualifications such as CISSP, CISM etc – Splunk architecture / fundamentals
• Foundational knowledge of at least two SIEM and logging products (Splunk, LogRythm, IBM QRadar, Alienvault, McAfee SIEM, ArcSight, Fortinet, SolarWinds etc)
• Experience of Splunk onboarding, transformation, event formats and Common Information Model
• Experience of deploying Splunk architecture in Off-Prem AWS, Azure and On-Prem
• SIEM: Support Primary allocated S3 resource with low level technical onboarding tasks (200+ identified to date)
• BPM: Business process design for onboarding in strategic splunk
• DevOps: DevOps cycle design for onboarding into Splunk/handoff with Use Case Framework and reporting
• CORS: Support Primary allocated S3 resource with ongoing accelerator work ad-hoc – Supporting Security design and architecture of national system such as genomics DB

CYBER, SECURITY, CYBER SECURITY, ARCHITECT, ARCHITECTURE, SIEM, SPLUNK, LOGRYTHM, QDAR, ALIENVAULT, ARCSIGHT, FORTINET, SOLARWINDS, AWS, AZURE, SOLUTION ARCHITECT, SOLUTION, BPM, DEVOPS, CORS