GIS Security Engineer

Overview

Our client's information security is looking for a candidate who will assist with the design, implementation, security and ongoing support of the cyber security detection program and processes within the Global Information Security Team.

This position will work directly with teams inside and outside of GIS as part of our overarching security strategy for Threat Management and Response, Data Science, and GRC initiatives.

The ideal candidate will have a passion for cybersecurity, system monitoring and analysis, security incident response, security forensics and developing / automating creative solutions. As a Use Case Developer, you will be expected to be skilled at identifying security detection gaps in infrastructure and process, effectively execute projects / initiatives to address them, demonstrate excellent judgment, prioritization and communication of technical security risks, and act as a security liaison supporting business units.

Roles & Responsibilities

• Develop security specific content necessary to implement Use Cases and transform into correlation queries, templates, reports, rules, alerts, dashboards, and workflow.
• Design dashboards to enable threat hunting, increase visibility to logs and reduce search time, using XML and Search Processing language (SPL) as and when required.
• Create reports, pivots, advanced Splunk search and visualization in Splunk Enterprise. Support application teams in onboarding Splunk and creating customized dashboards and correlation searches
• Troubleshooting of SPL (Splunk Query Language) searches for performance issues by adding lookups, correct joints and using summary indexes.
• Research and keep up to date on threat actors and new TTPs. Write detailed incident reports and deliver presentations to key business partners
• Participate in after action reviews and contribute to improvements in the overall security posture.
• Identify and clearly articulate (written and verbal) findings to senior management and clients, both technical and non–technical audiences
• Perform detailed analysis of threats, using sound analytical skills, knowledge and experience.
• Articulate security issues, analysis, and remediation techniques to peers, leadership, and across business lines
• Gather, maintain, and analyze cyber–security data and other key performance indicators for regular executive review and any compliance / regulatory related requirements

Required Skills

Work Authorization

Benefits

#J-18808-Ljbffr