Binary Defense

Security Engineer

• Architect, administer, and maintain Splunk instances for clients and internal environments
• Evaluate applications within client environments and prioritize critical data sources based on security value and license impact
• Provide guidance on logs and events to collect from devices for security purposes
• Determine the best log-collection method and assist clients with forwarding security logs to the specified SIEM platform
• Participate in weekly internal and client-facing project meetings
• Work closely with the Project Coordinator to keep projects on track and complete critical tasks promptly
• Participate in a weekly rotating on-call schedule
• Perform other duties assigned by the direct manager

Splunk Security Engineer

Security Operations

• Monitor and investigate security alerts to detect malicious activity for clients during shifts in a 24x7x365 SOC
• Perform Cyber Kill Chain and MITRE ATT&CK analysis on incoming security alerts
• Follow documented procedures to triage and respond to malicious activity, including escalation or remediation actions
• Provide clients with clear and concise written investigations in the Binary Defense service management system
• Communicate and collaborate with clients throughout escalated security investigations
• Contribute to security operations across the Binary Defense client portfolio
• Participate in shift handovers, team meetings, and knowledge transfer
• Complete regular training on current technologies and methodologies
• Stay up to date on vulnerabilities, threats, and attacks worldwide
• Interface regularly with shift mates and colleagues

Splunk Security Engineer

Tier 1 SOC Analyst