Job scope-
The Real-Time Security Event Correlation team within Cyber Security Operations organization provides automated monitoring and notification of security events. This will involve working directly with security teams across the Bank’s Global Information Security department as well as Bank application teams to elicit requirements and to interface with the technology team which administers Splunk. You will also be joining the team as we are migrating to Splunk from another SIEM application and look to start our next phase of SIEM modernization.
Required Skills:
·Strong working knowledge of the Splunk Platform and its Search Processing Language
·Experience in log parsing, lookups, field transforms/extractions using regular expressions
·Experience writing and tuning detections
·Creative problem-solving and the ability to tackle unique, complex projects
·Demonstrated commitment to training, self-study and maintaining proficiency in the technical cyber security domain
·Ability to work in a fast-paced environment where business needs/priorities may change
·Self-driven, collaborative, and able to work with minimal oversight
·Ability to navigate and work effectively across a complex, geographically dispersed organization
Desired Skills:
·A broad knowledge of information security principles
·Experience with other SIEM solutions
·Experience with CI/CD technologies
Susmita Sahu
Direct Line: 6697 7886
EA License No: 91C2918
Personnel Registration Number: R23114076
