SIEM Engineer
Core
Manage and optimize a large hybrid enterprise/cloud deployment of Splunk and Enterprise Security to defend Thomson Reuters from cyber threats.
Role type
Senior Splunk SIEM Specialist Engineer
Builds
Splunk and Cribl infrastructure, security analytics dashboards, and threat detection capabilities
Domain
Cybersecurity / SIEM / Cloud Operations
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
Splunk architecture, Enterprise Security, Cribl Stream, Advanced SPL, Cloud operations (AWS/Azure/GCP), Network protocols, Scripting (Python/BASH/PowerShell)
Preferred skills
Splunk certifications, Cribl certifications, DevOps tools (Terraform/Ansible), AI tools for automation
Technologies
Splunk, Cribl, AWS, Azure, GCP, Jenkins, CloudFormation, Terraform, Ansible, Python, BASH, PowerShell
Responsibilities
Monitor Splunk environment health and troubleshoot performance issues; Create and optimize Splunk queries, dashboards, and reports; Onboard new application and platform logs via various integrations; Collaborate with SOC and Threat Detection teams on threat use cases; Embed automation into infrastructure management; Facilitate high availability and disaster recovery capabilities
Seniority
Senior, hands-on IC