- Architect, maintain, and optimize customer Splunk environments- Integrate on-premises and cloud technology logs into Splunk, ensuring logging levels and parsing are consistent with requirements for security monitoring- Management of log source collection utilizing syslog, Windows forwarding, APIs, and more- Complete various data quality projects including, but not limited to, environment-wide Splunk Common Information Model (CIM) Compliance, licensing usage determinations and optimizations, and data integrity checks for parsing and timestamping discrepancies.- Perform optimization and normalization of logs including filtering, aggregation, and Regex-based parsing- Lead and assist in data quality and integrity initiatives within customer Splunk environments.- Provide environment maturity assessments and recommendations.- Perform Splunk patching and upgrading of Enterprise and Cloud system and apps / add-ons- Troubleshooting various appliances, applications, cloud platforms (GCP, AWS, Azure)

Log Source IntegrationsSIEM Component Installs and UpgradesSIEM Health ChecksExecutive Business ReviewsArchitecture Design and ImplementationRoadmap CreationMaintain, Upgrade, and Test in RQ Development Labs

Build ELK stacks to aggregate logs from numerous systems. Conduct routine inspections of security logs, install, manage, and configure security software, and monitor for security events and indicators of compromise on the network.

Diagnose, troubleshoot, and resolve a range of software, hardware and connectivity issues. Research and implement antivirus softwareArrange meetings with corporate engineers of software companies