Listing Description
The GitHub Security team is highly distributed and you must thrive in an environment of remote work and asynchronous communication. You're expected to have strong written communication skills and be able to develop working relationships with coworkers in locations around the globe. As a Security Operations Engineer at GitHub you'll always be challenged to solve interesting and novel problems that have real impact on how the world builds software.Managing a reliable high-volume, high-availability Splunk deployment in support of various security and engineering use cases.
Partnering with security, infrastructure, application engineering, and data analytics teams to ensure logging standard and pipeline, log analysis and enrichment infrastructure are well-positioned to meet required use cases.
Develop and maintain security infrastructure through reusable code and tooling.
Use metrics and monitoring systems to ensure performance, scalability, and stability.
Find ways to use existing systems to improve the security of our platform.
Interact with other teams outside of the Security department to ensure the confidentiality, integrity, and availability of our infrastructure and data.
Desired skills and experiences
Significant experience building and managing large, clustered Splunk installations.
Strong foundation in information security.
You have a track record of building infrastructure automation.
Proficiency in designing and maintaining AWS infrastructure to support logging and security use cases.
Experience with high-volume, high-availability logging pipelines.
Experience with Kafka and AWS S3/Kinesis for log transport and storage.
Experience with APIs, webhooks, and other technologies used to integrate security technology, enrich log data, and automate security workflows.
Proficiency in high-level languages such as Ruby, Python, and Bash.
A deep understanding of the Linux operating system, at both a high- and low-level.
Familiarity with configuration management software such as Puppet, Chef, Ansible, or Salt.
A tenacious ability to diagnose and fix performance and reliability problems.
You use a pragmatic approach to decision making and design choices.
Bonus Experience
You've built highly available systems at scale.
Splunk Architect or Splunk Administrator certification.
Capacity planning for large, multi-tier web systems.
Contributions to open source.
Experience with Elasticsearch.
Experience with SQL and Presto/Athena.
Experience with Kubernetes and Docker.
Experience with Linux kernel internals (TCP/IP stack, developing modules).
Listing Details
- Citizenship: No Requirements
- Incentives: Not Provided
- Education: No Requirements
- Travel: No Travel
- Telework: Full Telecommute