Security Operations Engineer - Splunk/Cribl

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Fulcrum Technology Solutions, so some details may not match this job. The employer's own page has the real description.

Overview

The Security Operations Engineer - Splunk/Cribl at Fulcrum Technology Solutions is responsible for implementing, managing, and optimizing security operations tools to ensure the integrity and protection of the organization's information systems. This role demands a proactive approach to identifying potential security threats, analyzing security events, and responding to incidents effectively. The successful candidate will leverage their expertise in Splunk and Cribl to enhance our security posture while working collaboratively with other IT and security teams to maintain a robust security infrastructure.

Job Responsibilities

• Implement and configure Splunk and Cribl solutions to support security monitoring and incident response.
• Analyze and correlate security data from various sources to identify trends and mitigate risks.
• Develop and maintain security dashboards, reports, and alerts to ensure visibility into security events.
• Respond to and investigate security incidents, providing detailed documentation and reporting.
• Collaborate with internal teams to enhance security controls and improve overall security processes.
• Stay up-to-date with the latest security threats and trends, and recommend preventive measures.
• Participate in security assessments, audits, and vulnerability management initiatives.
• Provide training and support to staff on security best practices and incident response procedures.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• A minimum of 3 years of experience in security operations or a related role.
• Proven expertise in Splunk and Cribl with hands-on experience in deployment and management.
• Familiarity with security frameworks and standards such as NIST, ISO 27001, and MITRE ATT&CK.
• Strong knowledge of network protocols, firewalls, and intrusion detection systems.
• Excellent analytical and problem-solving skills, with a keen attention to detail.
• Relevant security certifications (e.g., CISSP, CISM, CEH) are a plus.

Technologies & Tools

The Security Operations Engineer will primarily utilize various technologies and tools, including but not limited to Splunk, Cribl, SIEM (Security Information and Event Management) solutions, intrusion detection systems, firewalls, encryption technologies, and endpoint security platforms. Familiarity with scripting languages such as Python or PowerShell for automation and integration tasks will also be advantageous.

Ideal Candidates

Ideal candidates for the Security Operations Engineer position are those who possess a strong passion for cybersecurity and a proactive mindset in addressing security challenges. They should exhibit excellent communication skills to effectively collaborate with cross-functional teams and provide insights to both technical and non-technical stakeholders. A strong sense of urgency and attention to detail are key traits, coupled with the ability to adapt to a dynamic and fast-paced work environment while maintaining high standards of professionalism and ethics.