FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expert-level proficiency in Splunk and advanced scripting skills in Python and Bash, with a strong focus on security operations and incident management. Capable of leading technical teams, managing vendor relationships, and effectively communicating complex technical topics to diverse audiences.
Highest-signal resume keywords
Expert-Level Splunk ExperienceAdvanced Scripting In Python And BashSecurity Operations ManagementVendor Relationship ManagementTeam Leadership And Development
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Splunk Log Ingestion PipelineAdvanced Red Hat Linux SkillsRsyslog ConfigurationTechnical Requirements WritingSecurity Telemetry Sources ManagementIncident Response And TriageData Quality ManagementPerformance ReportingITIL Practices ApplicationCybersecurity Incident Coordination
Soft Skills
Strong Written And Verbal CommunicationRelationship BuildingSound JudgmentPerformance Feedback
Tools & Technologies
Splunk Enterprise SecurityUniversal ForwarderHeavy Forwarder DeploymentsSplunk DB ConnectVMware Data Collection NodeEDR/XDR Technologies
Certifications & Qualifications
Splunk Certified Consultant
Industry Keywords
Security MonitoringManaged Service DeliverySOC OperationsAudit Requests ManagementEmerging AI And Machine Learning Trends
Tech Stack
Tools & technologiesCloudCyber SecurityLinuxNode.jsPythonSplunkVMware
About the role
Key responsibilities & impact- Own the availability, performance, and data quality of the SIEM and log collection infrastructure
- Lead a team supporting the Security Monitoring function
- Build and maintain the Splunk log ingestion pipeline, RBAC, searches, reporting, and dashboards
- Support systems that feed the SIEM platform
- Lead a mixed team of employees and vendor staff in a player-coach role
- Act as the escalation point for monitoring platforms and security incidents
- Forecast data growth and manage ingest and compute within licensed capacity
- Provide metrics, performance reports, and dashboards to leadership
- Apply ITIL practices to incident, request, and change management
- Manage vendor relationships and contracts, including SLAs, performance reviews, and service review meetings
- Assign work to employees and external resources in line with shared strategy and goals
- Lead responses to audit requests related to monitoring systems and controls
- Coordinate with stakeholders during cybersecurity incidents
- Support triage and escalation of security events and threats using SIEM data
- Partner with engineering and architecture teams to define requirements and timelines
- Deliver projects improving security event collection, detection, analysis, correlation, and response
- Advise infrastructure and security teams on configuration changes that improve event collection
- Track emerging AI, machine learning, and analytics trends for security monitoring
- Align the team with short- and long-term goals, provide tools, remove blockers, and give performance feedback
- Explain complex technical topics to non-technical stakeholders
Requirements
What you’ll need- 10+ years in IT, including 5+ years in security operations or as a monitoring system manager or lead engineer
- 5+ years leading or directing technical teams, including contractor staff
- Expert-level Splunk experience; Splunk Certified Consultant or equivalent demonstrated expertise
- Advanced Red Hat Linux skills
- Advanced scripting in Python and Bash
- Advanced rsyslog configuration experience
- Experience writing technical requirements and working with engineering teams to deliver them
- Strong written and verbal communication, with the ability to build relationships and present to audiences from engineers to executives
- Sound judgment in weighing security controls against technical and administrative standards and making risk-appropriate tradeoffs
- Experience with Splunk Enterprise Security and SOC operations, including triaging security incidents and threats
- Experience overseeing managed service delivery and vendor SLAs
- Experience with security telemetry sources such as syslog, Universal Forwarder and heavy forwarder deployments, Splunk DB Connect, and the VMware Data Collection Node
- Familiarity with modern detection technologies (EDR/XDR) and cloud security logging
- Experience in a large, complex organization working across multiple business lines
Benefits
Comp & perks- Annual bonuses or other incentive plans
- Equity awards
- Pension or retirement benefits
- 401(k) company match
- Health and wellness programs
- Fitness centers
- Medical, dental, vision, life, and disability insurance benefits
- Paid time off
- Family support benefits
- Reasonable accommodation during the recruitment process where required
- Opportunities to speak at industry conferences