Position Overview
- Should be Splunk admin certified and Enterprise Splunk architect certification.
- Performing hands-on architecture, design, and development of systems. Developed Splunk infrastructure and related solutions.
- Standardize and implement Splunk Universal Forwarder deployment, configuration and maintenance in Linux and Windows platforms
- Maintain, Manage and Monitor Splunk Infrastructure (Identify bad searches, dashboards and health of Splunk)
- Used User Behavior Analytic to parse data into Splunk and detect anomalies in true positive events
- Used SNMP (Simple network management protocol) to monitor the application on the server
- Using Splunk Enterprise to perform data mining and analysis, utilizing various queries and reporting methods
- Analyzing and monitoring security-related technologies including host-based firewalls, host-based using IDS, LDP server configuration controls, logging, SIEM, monitoring tools, antivirus systems.
...