About the role
The Splunk ITSI Specialist plays a crucial role in leveraging Splunk's Intelligent Threat Detection to enhance our security operations. This role is vital for identifying and mitigating security threats with precision and speed. The ideal candidate will possess a deep understanding of security operations, threat detection, and advanced Splunk functionalities to safeguard our digital infrastructure. As a Splunk ITSI Specialist, you will work closely with security teams to ensure robust and proactive threat detection.
Experience Required:3+ years
Key Responsibilities:- Develop and maintain Splunk ITSI configurations to ensure optimal threat detection.
- Create and refine detection models to improve accuracy in threat identification.
- Analyze and interpret security data to identify potential threats and vulnerabilities.
- Collaborate with security analysts to validate and act on detected threats.
- Continuously monitor and update threat detection playbooks based on emerging threats.
- Generate detailed reports on security incidents and detection model performance.
- Participate in incident response activities to support proactive threat mitigation.
- Provide training and guidance to security team members on Splunk ITSI tools.
- Integrate Splunk ITSI with other security tools and systems for comprehensive threat detection.
- Support the development and maintenance of security policies and procedures.
- Minimum of 3 years of experience in security operations or a related field.
- Proficiency in Splunk ITSI and its advanced features.
- Strong understanding of security threat detection and incident response.
- Experience with security information and event management (SIEM) tools.
- Excellent analytical skills to interpret security data and identify threats.
- Ability to work collaboratively in a fast-paced security environment.
- Strong knowledge of network security principles and protocols.
- Experience with threat modeling and detection strategy development.
- Excellent problem-solving and critical thinking skills.
- Strong communication skills to convey complex security concepts to non-technical stakeholders.
- Splunk ITSI
- SIEM
- Threat Detection
- Python
- Linux
- Cybersecurity
- Data Analysis
- Threat Modeling
- Incident Response
- Vulnerability Assessment
- Network Security
- Security Policies
- Risk Management
- Scripting
- Machine Learning
- Data Visualization
- APIs
- Cloud Security
- Forensic Analysis
- Endpoint Detection and Response (EDR)
- Threat Intelligence
- Security Frameworks
- Compliance Audits
- Minimum of 3 years of experience in security operations or a related field.
- Proficiency in Splunk ITSI and its advanced features.
- Strong understanding of security threat detection and incident response.
- Experience with security information and event management (SIEM) tools.
- Excellent analytical skills to interpret security data and identify threats.
- Ability to work collaboratively in a fast-paced security environment.
- Strong knowledge of network security principles and protocols.
- Experience with threat modeling and detection strategy development.
- Excellent problem-solving and critical thinking skills.
- Strong communication skills to convey complex security concepts to non-technical stakeholders.