全职 SOC Engineer (Splunk) 工作, 薪水, Lavu Tech Solutions Federal Territory 公司招聘中 - Ricebowl

Looking for someone available locally.

• Hands-on experience in Security Operations Center (SOC) with strong expertise in Splunk SIEM for security monitoring, log analysis, correlation, and incident investigation.
• Monitor, detect, analyze, and respond to security incidents across IT, ICS/OT, endpoint, and email security environments.
• Investigate security alerts, perform threat hunting, root cause analysis, and coordinate incident containment and remediation.
• Manage and fine-tune Splunk dashboards, correlation rules, alerts, and use cases to improve detection capabilities.
• Work with security tools such as EDR/XDR, Email Security Gateways, IDS/IPS, Firewalls, and ICS/OT security solutions.
• Collaborate with infrastructure and security teams to strengthen security posture, ensure compliance, and support vulnerability management activities.

Required Skills:

• Splunk Enterprise SIEM
• Incident Response & Threat Analysis
• ICS/OT Security
• Endpoint Security (Microsoft Defender, CrowdStrike, SentinelOne, etc.)
• Email Security (Microsoft Defender for Office 365, Proofpoint, Mimecast, etc.)
• SIEM Use Case Development & Log Analysis
• MITRE ATT&CK, IOC Analysis, Threat Hunting
• Strong understanding of TCP/IP, Windows/Linux security, and cybersecurity best practices.