Expoint - all jobs in one place

מציאת משרת הייטק בחברות הטובות ביותר מעולם לא הייתה קלה יותר

Limitless High-tech career opportunities - Expoint

SAP SPLUNK Cyber Platform Data Engineering Specialist 
Canada, Ontario, Toronto 
901541889

28.11.2024


Key Responsibilities

1. Installing, configuring, and ensuring operational excellence throughout the lifecycle of our security data platforms and all itscomponents to ensure they are operating effectively, efficiently and applying industry best practices (NIST CSF, MITRE ATT&CK)

2. Provide hands on and proactive resolution across data platforms (SIEM), including troubleshooting and resolving issues related to data storage, processing, and analysis.

3. Drive collaboration across functional partners to resolve technical issues related to security data platforms.

4. Developing and implementing solutions to enhance the performance and security of the data platforms.

5. Keeping abreast of the latest security trends and technologies to provide proactive support and recommendations for improvements impacting threat detections and indicators of compromise (IOC).

6. Documenting and maintaining accurate records of support activities, including issue resolution, system configurations and maturing ourcadence of repeatable reporting to ensure SLA are met and KPI are socialized

7. Conducting regular system audits and performance tuning to ensure optimal functionality and security.

8. Active participation within our global 24/7 on-call rotation ensuring swift response to critical and/or emergency support requests ensuring platform and data availability meet the needs of our customers.

9. Contributing to the development of standard operating procedures and best practices for system support and maintenance.

10. Collaborating with vendors and external partners to troubleshoot and resolve technical issues related to security data platforms.

What you bring

  • 3+ years' experience of technical support or similar role bias towards security operations on a global scale
  • Basic knowledge of security information and event monitoring (SIEM)
  • Support and operate cutting-edge data architectures ensuring maximum service availability and performance.
  • Collaborate with internal product teams and services to deliver tailored data-driven solutions.
  • Stay informed and ahead of the curve by continuously updating your knowledge of emerging data technologies and trends.
  • Experience administering and/or operatingof one or more of
    • Splunk and/or similar platforms
    • data streaming tools e.g. CRIBL, Kafka
  • Proficiency in cloud platforms (GCP, AWS, Azure) and data tools
  • Knowledge of Linux kernel, command line and system diagnostics
  • Exposure to scripting basics and regular expressions.
  • Capable of multi-tasking, good time management and prioritization of workload.
  • Knowledge of information security frameworks and requirements (e.g., PCI, NIST, SOC, GDPR).
  • Experience with automation and integration of large complex datasets.
  • Bachelor’s degree focused on Science, Technology, Engineering, and Mathematics (STEM) disciplines or equivalent experience.
  • Industry Security Certifications (e.g., CISSP, CISA, CISM, CCSP, GCFA, GCIH, GCIA, GNFA, GREM, GCCC, or Security+) are preferred.
  • Excellent English communication skills (written and oral)

We win with inclusion

Specific conditions may apply for roles in Vocational Training.


Job Segment:ERP, Cloud, Information Security, CAD, Database, Technology, Engineering