Description: Job Title: Splunk SME
Inside IR35
Clearance required: SC
Location: Remote with occasional Travel to at client site in Warwick. Potentially also Farnborough/Corsham.
Via Umbrella
Until 31/03/2025 initially
Job Description:
A Splunk SME to manage and optimize log management and SIEM environment. Will configure and maintain Splunk Heavy Forwarders, Windows Event Collectors, and Syslog Aggregators to ensure efficient log collection, analysis, and correlation. The focus will be on normalizing data, configuring event sources for various devices (Cisco, Palo Alto, F5, Fortinet, HPE, VMs), and developing event correlation rules, alerts, and dashboards to support our CSOC. This role requires a strong understanding of Linux, Windows, and networking logging concepts.
Essential Skills:
Proven experience with Splunk Heavy Forwarders on Linux platforms.
Strong understanding of Windows Event Collector Services (WEC).
Hands-on experience with Syslog Aggregators.
Expertise in log management and forwarding best practices.
Desirable Skills:
Experience implementing Splunk environments to CIS Level 1 and Level 2 standards.
Familiarity with Red Hat Enterprise Linux Server.
Knowledge of forwarding events to Splunk Enterprise and ServiceNow platforms.
Experience integrating Splunk with SolarWinds.
Understanding of Reliable Event Logging Protocol (RELP).
Due to the nature and urgency of this post, candidates holding or who have held high level security clearance in the past are most welcome to apply. Please note successful applicants will be required to be security cleared prior to appointment which can take up to a minimum 10 weeks. LA International is a HMG approved ICT Recruitment and Project Solutions Consultancy, operating globally from the largest single site in the UK as an IT Consultancy or as an Employment Business & Agency depending upon the precise nature of the work, for security cleared jobs or non-clearance vacancies, LA International welcome applications from all sections of the community and from people with diverse experience and backgrounds.
Award Winning LA International, winner of the Recruiter Awards for Excellence, Best IT Recruitment Company, Best Public Sector Recruitment Company and overall Gold Award winner, has now secured the most prestigious business award that any business can receive, The Queens Award for Enterprise: International Trade, for the second consecutive period.
TPBN1_UKTJ