SIEM Engineer

About the role

The Information Security and Risk Management (ISRM) organization is seeking a Splunk SIEM Specialist Engineer to join our growing SIEM & Security Analytics team. This candidate will join a team in managing a large hybrid enterprise/cloud deployment of Splunk and Enterprise Security and partnering with our SOC, CIRT, Threat Detection, and Cyber Intel functions to deliver capabilities to improve their ability to defend Thomson Reuters from cyber threats.

What you'll do

• Responsible for monitoring and stability of Splunk, and Enterprise Security SIEM platform
• Create and optimize Splunk queries, dashboards and reports to support business and operational needs
• Monitor Splunk environment health and platform troubleshooting and performance tuning
• Splunk optimization by troubleshooting ingestion delays, parsing errors, and search performance issues
• Managing Splunk infrastructure in AWS cloud, cloud operations experience is preferred

What you need

• 1–3 years in cybersecurity
• SIEM
• Splunk
• Risk management
• Any graduate

Good to have

• AWS