Senior It Security Specialist

Title: Senior IT Security Specialist

Location: Candidates local to Raleigh/Durham/Chapel Hill, NC area. Local preferred, relocation will also work

Hybrid - About 1 day/week onsite

Start - Immediate

End Client - State of NC

Certifications - Splunk certifications must

Seeking an Information Technology (IT) professional with proven Splunk (SIEM) Security Information Event Management experience and knowledge to address Risk Management Framework (RMF) compliance

Role - Identification of gaps through risk management, assist in the development of mitigation strategies, and establish the target security/infrastructure architecture.

Duties include, but are not limited to:

•Experience with Splunk, network security, server and system security, and application security supporting event management tools, including SIEMs.

•Experience in configuring the data ingestion to Splunk Cloud from various data sources such as Linux Logs, Application Logs, and Cloud Native Service Logs.

•Detailed understanding and strong skill set in operating and working with the Splunk toolset

•Proven experience with rule and advanced logic creation in Splunk, including knowledge of thorough understanding and operational experience with Splunk Search Language

•Development of automated searches and applications using Python, Shell scripting, HTML, CSS, and regular expressions

•Experience in developing Splunk Dashboards and configuring alerts for notable events.

•Thorough understanding of Splunk’s Common Information Model (CIM)

•Experience in configuring and customizing the Splunk Enterprise Security for SIEM capabilities.

•Expert level skills in assessing the current Splunk Cloud Infrastructure and ensuring that it was configured using Splunk Best Practices.

•Experience in implementing Advanced Threat Analytics using Splunk Enterprise Security

•Experience with a scripting language (Bash, Python)

•Expertise with Linux and Command-line interface

•Experience deploying apps within Splunk or administrating the Splunk platform

•Excellent troubleshooting skills and strong technical learning aptitude required.

.Experience in HIPAA Privacy and Security Risk Assessments

•Splunk certifications