Splunk Architect

Key Requirement

1. Work within the Global Security Operation Centre (GSOC) teams & SIEM technicians to support low level issues and events, including the development of the Splunk system to hone its operational stability & effectiveness.
2. Provide subject matter expertise through the design, development, build and testing of the new Splunk SIEM platform.
3. Support additional project streams within the overall Incident Detection & Response programme, where direct interdependencies with the Splunk SIEM arise.
4. Meet with SMEs and key stakeholders to build a clear understanding of the requirements and technical, policy and governance expectations.
5. Support the review and development of the design document.
6. Understand project deliverable, timelines, interdependencies, including associated risk and issues.
7. Work with, and be instructed by the project manager as to the expectations and deliverables of the project to support the solution design & governance approval
8. Work with the Solution Architect to support the solution design & governance approval
9. Understand and support the service introduction related activities where required.

Essential

• Minimum of 7 years direct and relevant Splunk product experience at consultancy/architect level and consistent with a Splunk SME.
• Deep understanding of SIEM and associated tooling in a Global Security Operations Centre environment.
• Expert experience in on-prem and Cloud Cyber tooling.
• Extensive experience of on-prem and Cloud infrastructure, & services.
• Excellent communication skills (English) - verbal & written.
• Proven ability to work effectively across all organisational levels.
• Effective multi-tasking and time management skills.
• Educated to degree level or equivalent.
• Demonstration of relevant technical skill expected.

Preferred

• Cloud - AWS and Azure.
• Financial services experience.