Need help with Ph.D. Questionnaire

Job Roles:

· Developing Splunk artefacts and reports on security baseline violations, Non-authenticated connections, Brute force attacks, and many use cases. support, Monitor, and manage the SIEM Environment.

· Splunk Administration and analytics development on Information Security, Infrastructure and Network, Data Security, Splunk Enterprise Security app, Triage Events, Incident Analysis.

· Integration of Splunk with a wide variety of legacy ad Security Data Sources that use various protocols.

· Trained Splunk security team members for complex search strings and ES modules.

· Developed specific content necessary to implement Security Use Cases and transform into correlation queries, templates, reports, rules, alerts, dashboards, and workflow Splunk SPL (Search Processing Language) and Dashboarding/Visualization. Set up dashboards for network device logs.

· Headed Proof-of-Concepts (POC) on Splunk ES implementation, mentored and guided other team members on Understanding the use case of Splunk.

· Customized Splunk for Monitoring, Application Management, and Security teams as per customer requirements and Splunk best practices.

· Implement business functional requirements into robust, secure, high-quality applications.

· Fix detected vulnerabilities to maintain a high-security standard.

· Keep up to date with the latest security and technology developments.

· Search/evaluate emerging cybersecurity threats and ways to manage them.

· Integrate with the third party, best in class applications and creates technical documentation.

· Working with various developers, engineers, and enterprise architects to onboard new logs to Splunk in a distributed environment.

· Providing technical services to projects, user requests and data queries as well as supported change management processes.

· Supporting the splunk infrastructure dealing production issues.

· Assisting teams in getting the data into splunk.

· Development of splunk Queries to generate the Reports.

· Configuration of apps and installing on the splunk infrastructure.

· Implementation coordination assistance with reporting, analysis and completion of backlog items

· Monitoring and reporting on all the data by creating dashboards and alerts.

· Completing defect status reports.

· Understanding of multiple operating systems (Windows, Linux, Unix, etc.) and technical platforms (networks, firewalls, storage, virtualization).