Splunk Core Consultant & Enterprise Security
- Start: ASAP
- Length: Initial 3 months, potential extension
- Status: Outside IR35
- Rate: £500 - £600
- Location: Remote, ad-hoc meetings in Gosport
- Clearance: Must have an Active SC Clearance
Responsibilities:
- Support the completion of a health check of the Splunk environment to ensure the foundations are stable and to ensure the architecture is properly designed to account for future growth.
- Implement recommendations as agreed with the customer based on their priorities and dependencies.
- Support SOC analysts with tuning and suppressing alerts to reach a manageable state.
- Support SOC analysts with refinement and mapping of ~200 use cases.
Expected Skills & Experience
- Certified and experienced Splunk Core Consultant
- Certified and experienced Splunk Enterprise Security Admin
- Experience working in SOCs in the Defence sector