FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in administering and enhancing SIEM platforms, particularly Splunk, while integrating diverse data sources and ensuring data governance. Proficient in developing queries, creating use cases, and mapping detections to the MITRE ATT&CK framework.
Highest-signal resume keywords
Splunk Enterprise AdministrationSPL Query DevelopmentData Source IntegrationMITRE ATT&CK Framework KnowledgeInformation Security Governance
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
SIEM AdministrationSPL ProgrammingData IntegrationCyber Threat DetectionIncident Response AutomationLog AnalysisData Quality PracticesTechnical DocumentationAutomation with PythonAutomation with PowerShell
Soft Skills
Strong Communication SkillsAnalytical CapabilitiesInvestigative SkillsProactive MindsetProblem-Solving Ability
Tools & Technologies
SplunkSOAR PlatformsEDR/XDR SolutionsIAM SystemsCloud EnvironmentsThreat Intelligence Platforms
Certifications & Qualifications
Splunk Platform Administration CertificationSplunk Enterprise Security Certification
Industry Keywords
Information SecuritySOC EnvironmentsData GovernanceData RetentionData ClassificationTraceabilityWindows LogsLinux LogsActive DirectoryFirewall Logs
Tech Stack
Tools & technologiesCloudDNSLinuxPythonSplunk
About the role
Key responsibilities & impact- Administer, maintain, and enhance SIEM platforms, with a primary focus on Splunk.
- Perform onboarding and integration of new data sources via Syslog, APIs, HEC, Forwarders, and other mechanisms.
- Develop and optimize queries using SPL.
- Create, test, and tune use cases, alerts, and correlation rules.
- Map detections to the MITRE ATT&CK framework.
- Support security data governance, including data quality, retention, classification, and traceability.
- Support integrations among SIEM, SOAR, EDR/XDR, IAM, Cloud, and Threat Intelligence platforms.
- Create and maintain technical documentation for integrations, data sources, and use cases.
- Contribute to the advancement of cyber threat monitoring and detection capabilities and the SOC.
Requirements
What you’ll need- Professional experience in Information Security, working with SIEM and SOC environments.
- Solid experience with Splunk Enterprise, preferably in platform administration and engineering.
- Advanced knowledge of SPL.
- Experience integrating and onboarding data sources.
- Knowledge of logs from Windows, Linux, Active Directory/Entra ID, firewalls, WAF, EDR/XDR, IAM, proxies, DNS, and Cloud environments.
- Knowledge of the MITRE ATT&CK framework.
- Knowledge of data governance and quality practices applied to Information Security.
- Strong communication and interpersonal skills.
- Analytical and investigative capabilities.
- Proactive mindset and strong sense of responsibility.
- Ability to resolve complex problems.
- Splunk-related certifications, especially in platform administration or Splunk Enterprise Security (preferred).
- Experience with Splunk Enterprise Security (ES) (preferred).
- Experience with other SIEM platforms (preferred).
- Experience with automation using Python, PowerShell, or APIs (preferred).
- Experience with SOAR and incident response automation (preferred).
Benefits
Comp & perks- 14th and 15th fixed annual salaries
- Profit-sharing, based on seniority
- Health and dental insurance with no copayments
- Well-being programs through Wellhub (formerly Gympass), including nutrition, psychological support, workplace exercise, massage, running groups, and a local gym
- Meal and food allowances, with flexibility to allocate percentages between the VA and VR cards, with no copayments
- Extended maternity and paternity leave
- Childcare or nanny assistance for children up to 6 years and 11 months old
- Assistance for employees with children with disabilities, with no age limit
- Life insurance
- Private pension plan with contributions of up to 8% of salary
- Training platform – Sicredi Aprende, offering a variety of courses
- 40-hour workweek, using a time-banking system
- Remote-work allowance (except for positions that are 100% on-site)