Duties/role:

Manage and maintain Splunk instances on CSSL networks
Develop visual, interactive dashboards, reports and search queries on Splunk
Support integration of external data sources on Splunk, with focus on Arcsight CEF, McAfee ePO and SQL DBs
Develop or support development of integration scripts between different tools/technologies
Manage and maintain Network and Services Discovery infrastructure
Plan and execute network discovery sweep tasks across NATO networks to provide map, to list available services and to report unknown elements
Support integration of output of aforementioned capabilities, especially for Security Information and Event Management (SIEM), Cyber Operation Management System (COMS) and Cyber Defence Decision Support System (CDDSS)
Implement operational deployment of security applications to facilitate collection of security related data and to mitigate security risks

Requirements

Required level of Security Clearance: NATO Cosmic Top Secret

Skills, knowledge, experience required:
Proficiency with Network (TCP/IP) Engineering and secure network design
Knowledge in Big Data concepts and associated product technologies (nosql, Hadoop, hive, mapreduce)
Demonstrated experience with Splunk
Demonstrated experience with log collection
Demonstrated experience in developing scripts to query web-based APls, ideally Python or Perl
Comprehensive knowledge of Security Incident Handling