IT支持工程师（Splunk/SIEM/ELK）

岗位职责

YourkeyResponsibilitiesKeyresponsibilitieswillincludetheimplementationandrunstateofSIEM-relatedtechnologies.TheroleperformsLevel3supportforInformationSecuritySIEMtechnologies.Responsibilitiesinvolvethedailymanagementofincidents,operationalmaintenanceandsupport,andproactive/preventativeanalysisofsystems.ApplicationscanresideinEYaswellaswithinvendorfacilitiesandcloud.• ProvidetechnicaloversightofInformationSecuritytechnologiesthatfallundertheteam’sresponsibilities,confirmingtheyareoperatingwithinagreedservicelevelsandatpeakpossibleperformance• Monitoringperformanceofcorrelatedandscheduledsearchesandidentifyopportunitiestomakesearches/dashboardsmoreefficientinSplunktoimprovetheirperformance• Creating/Testing/DeployingSplunkupgrades,configurationschanges,etc.inmultipleenvironments• MonitoringtheSplunkinfrastructure(includingbutnotlimitedtonon-performantqueriesanddashboards,keyhealthindicatorsoftheplatform).• Manage,driveandcoordinateplannedmaintenanceactivitiesaswellasthestandardizationandautomationofprocessesandproceduresforInformationSecuritytechnologies.• Representtheteaminspecificprojectactivities,includingparticipatinginprojectsanddrivingteamdeliverablestowardssuccessfulcompletion.• Articulatetechnologyissues/concernsthatmayemergeatanylevelofthetechnicalstack,andfromanycomponentacrosstheecosystem,totechnologyleadersSkillsandattributesforsuccessWeareinterestedinpeoplewhobringinoperationalexperienceinlargeenvironmenthavingperformeddetailedtroubleshootingofissues,byusingtheiranalyticalskillsandcollaboratingwithothertechnicalteams,stakeholdersandinternalandexternalcustomers.Asasuccessfulcandidate,youwillhavefunctionaland/ortechnicalexperienceinsupportingavarietyofSecurityInformationandEventManagementtools.Toqualifyfortherole,youmusthave• 6-8yearsofexperienceinanenterpriseITsupportrole• ExperienceinSupervisingindividuals/teamsisrecommended.• MusthaveSIEMtoolexperienceinMulticluster/Multisiteenvironment.• PossessskillswithintheAzurecloudtechnology