● Identify threats, analyze them, and investigate the root cause with Splunk.
● Implement use cases, dashboards, and alerts on Splunk.
● Basic penetration test on services and prepare solutions for security holes.
● Analyze security logs, trace attacks, and report threats.
● Generate reports on information security issues.
● Threat hunting and incident handling.
Requirements
● Bachelor's degree in Computer, Telecommunications or IT.
● 3 years of experience as a security engineer.
● Understanding and hands-on experience in SIEMs.
● Hands-on experience in Splunk.
● Knowledge of CEH, CISSP, SANS, LPIC, and CCNP Security.... (preferred).
● Hands-on experience in Linux and Microsoft OS.
● Experience and flexibility regarding on-call responsibilities.
● Intermediate level of written and spoken English.
● deep investigation on the logs of Firewalls, UTMs, WAF, and IPS/IDS