Senior SIEM Engineer (Splunk or Sentinel) - Accenture United States Bookmark Share Print 868 1 1

Listing Description

Sr SIEM Engineer

In this role you will be the "Trusted Advisor" on best practices to protect information. Apply data driven insights to create business justifications and value proposition for proposed engineering investments. Convert complex scenarios into business requirements and then drive technical project specifications. Assist, manage, and mentor other cybersecurity team members on the team. Research and keep up to date on threat actors and new TTPs. Write incident reports and deliver presentations to key business partners as well as help define roadmaps. Drive multiple simultaneous work streams; manage schedules, risks, and issues with effective communication to the team, to senior management and company executives.

REQUIRED

• 3+ years hands-on experience with 1 or more of the following SIEM tools: Splunk Enterprise Security, ELK, Azure Sentinel

• Deep experience architecting, managing deployment, and operationalization of SIEM in client environments

• Hands-on content(use case) development experience using 1 or more SIEM query languages (Splunk SPL, Kusto Query)

• Understanding of the MITRE ATT&CK framework

• Experience managing teams of several cybersecurity analysts and/or consultants

• Experience working with various technical departments to enhance threat detections of deployed SIEMs

• Solid technical knowledge of Linux and Windows

• Excellent root cause analysis skills

• Demonstrated ability to create and present executive level briefings

• Strong verbal & written communication skills

• Strong critical thinking and group facilitation skills

NICE TO HAVES

• Knowledge of information security standards (ISO, NIST, PCI, PIPEDA, GDPR etc.)

• Experience with cloud environments(e.g., Azure, AWS,GCP, etc.) and, cloud security architecture

• Proficiency in operating systems, database platforms, web technologies, firewalls and programming languages

• Scripting experience with one or more of the following languages: Powershell, Bash, Shell, Python