Security SIEM- remote

Security SIEM EngineerJob Location: Remote, RoleJob Duration: Long Term Contract RoleJob Responsibilities:Day to day management of Splunk Cloud platform including Splunk Enterprise Security.Splunk configuration and content management - creation of advanced correlation searches, alerts, and reports. Understanding of Splunk architecture, performance, and integrations.Creation of Risk-based alerting rules within ES platform.Development of dashboards, searches and reports to identify potential security incidents.Alignment with security frameworks such as MITRE ATT&CK, CIS, and NIST.Use the Incident Response Lifecycle to guide your work tasks and implement processes and procedures.Perform integrations and automations with SOAR platform.Education and Experience:Certified Information Systems Security Professional (CISSP) or Equivalent preferred.SANS and/or Advanced GIAC certifications desired.Bachelor's degree in Computer Science or a related technology field or equivalent in comparable work experience within the network or security field preferred.Extensive experience with network security devices such as firewalls, Intrusion Detection/Prevention, web application firewalls, Wireless Intrusion Prevention, Vulnerability Management and SIEM tools.Experience with information security incident response and risk mitigation.Experience in Linux and Windows system administration and security.Experience with Javascript and Python programming languages.Skills and Knowledge:Knowledge of SIEM technologies such as Splunk, Exabeam, Devo, SumoLogic.Excellent communication and writing skills.Open-minded, adaptable and passionate about learning.Highly motivated and able to work independently and as part of a high performing team.Broad knowledge of Enterprise Infrastructure concepts and best practices as they relate to Cyber Security and incident response.