We are looking for a Technical Consultant focusing on SIEM (m/f/d), Ref. 673

IP Systems GmbH

• Founding & Focus: Engineering and consulting company founded in 1999 with a focus on telecommunications and IT
• Customers: Telecommunications, Media & Broadcasting, Transport & Logistics, and Public Sector

Services:

• Technical and project management support
• Product and technology introduction
• Program and project management
• IT Security Services
• Professional services as well as program and project management (classic, agile, hybrid)

Competence & Approach:

• Multidisciplinary teams of experienced engineers, computer scientists, and business experts
• Practical, pragmatic, and solution-oriented
• Support throughout the entire lifecycle: from conception and introduction to implementation and operation

Responsibilities

Project Description:

Services are to be provided in the area of security in operational technology - Security Operations Center.

The Security Operations Center (SOC) builds cybersecurity systems and develops processes to monitor our client's infrastructures, IT systems, and operational facilities, to detect threats and defend against them accordingly. To detect cybersecurity attacks, Security Use Cases are developed to enable automated threat detection.

Your Responsibilities:

• Design and optimization of the SIEM (Splunk) platform for a distributed environment
• Data onboarding management and configuration of log data
• Management of Splunk Knowledge Objects, Data Models
• Restructuring (parsing) of log data
• Configuration of data model acceleration
• Troubleshooting, debugging, and diagnostic capabilities in a complex IT/OT environment
• Log file quality review
• Development of apps
• Implementation and maintenance of the Splunk platform infrastructure and configuration
• Implementation of integration with external systems (e.g., Splunk HF/UF, Rsyslog, Cribl, etc.)
• Establishment of best practices and development standards
• Management of application availability, performance, and proactive detection of performance bottlenecks
• Support in the creation of regular SOC reporting via appropriate KPIs
• Log management and quality assurance
• Development of dashboards, reports, custom queries
• Documentation

Qualifications

• Expert knowledge of Splunk solutions (e.g., platform configuration, web user interface, and Common Information Model, etc.)
• Strong understanding of industry standards and technologies
• Scripting (such as Python or others)
• At least 7 years of experience in networking
• Sound knowledge of Windows or *nix systems
• At least 7 years of experience with common infrastructure technologies
• Ability to install complete Splunk environments, filter data, and manage indexes
• Experience with connected, heterogeneous systems
• Understanding of regular expressions
• Excellent communication skills
• Structured, independent, and thorough way of working, including self-directed learning of new topics

Benefits

What we offer you:

• Intensive onboarding and technical support from experienced network engineers
• Funded qualification for Cisco CCNA and support for further certifications
• Varied project work in our client environment with a strong technology focus
• Individual development through specialized further training and certifications (such as workshops, seminars, and training)
• Simple communication channels across different levels of responsibility
• Flat hierarchies within our company with a familial and productive atmosphere
• Participation in the company's success
• Hybrid working with flexible working hours
• Individual technical equipment
• Access to our Corporate Benefits platform, quarterly company events
• An unlimited employment contract with 30 days of vacation, Christmas Eve and New Year's Eve are also additional holidays

Do you feel addressed and do you see yourself in the description? We look forward to receiving your complete application documents with Reference 673.

We are very excited to receive your application!

Find more English Speaking Jobs in Germany on Arbeitnow