Ref: 151225
Job description
Requirements Description:
Skills:
- A minimum requirement of a Bachelor's degree from a nationally recognised/certified university in a related discipline and two years post‑related experience. Alternatively, the lack of a university degree may be compensated by the demonstration of a candidate's particular abilities or experience of interest to the NCI Agency, provided the candidate has at least five years of extensive and progressive expertise in duties related to the function of the post.
- At least 1 year of extensive practical experience as SIEM administrator with Splunk in large enterprise environment (deployment, installation, configuration and maintenance). Hands-on experience in the design and maintenance of distributed Splunk architectures.
- At least 2 years and expert level experience related to SIEM and Log collection management activities.
- Demonstrable experience of analysing and interpreting system, security and application logs in order to diagnose faults and spot abnormal behaviours.
- Practical hands-on experience in systems and tools administration, especially Linux environment;
- Comprehensive knowledge of the principles of computer and communication security, networking, and the vulnerabilities of modern operating systems and applications.
- Practical skills in writing Bash, Python or Ansible scripts to support repetitive tasks automation;
- Solid Linux system and application administration and troubleshooting skills.
- Solid understanding of regular expressions.
- Ability to develop clear and concise technical documentation, including procedures.
- Good communication abilities, both written and verbal, with the ability to clearly and successfully articulate complex issues to a variety of audiences and teams.
- A university degree (Bachelor's) in Cyber Security, Information Technology, Computer Science or a related discipline.
- Experience working in a regulated, high control environment such as defence, government, financial services or other enterprise sectors.
- Extensive practical experience (as system administrator) with Splunk Enterprise security, Splunk SOAR and Splunk UBA.
- Practical experience with Git software.
- Hands-on experience with Ansible as an automation technology.
- Experience in creation/modification of custom parsers.
- Software engineering including programming and/or scripting knowledge (python, shell scripting, PowerShell).
- Prior experience automating interactions between systems using APIs.
- A solid understanding of Information Security Practices; relating to the Confidentiality, Integrity and Availability of information (CIA triad.).
- ITIL Service Management certifications.
- Experience in developing Splunk Applications.
- Content management experience in Splunk, especially Enterprise
- Security and Advanced Search and Reporting.
- Hands-on experience with network infrastructure and virtualised environments.
- Previous experience working for Cyber Security related organisations (CERTs, security offices).
- Experience with log collection in cloud environment such as Azure or AWS.
Skills:
- Very good communication and analytical skills.
- Language proficiency in English: meet or exceed the NATO STANAG 6001 Level 3 "Professional Proficiency".
- Possessing industry leading certification in the area of Cyber
- Security such as CISSP, CISM, CISA, GSNA, and SANS GIAC.
- Experience in working for or supporting a military or governmental organization.
- Bachelor's degree from a nationally recognised/certified university in a related discipline and three years post‑related experience.
Apply for this role
Hi I'm Craig.
I manage this role
If you would like to know more about this role or similar jobs, please get in contact with me.
Recommend.
this role to a friend
Is this role revelant to any one you know?
Share it with them now.
