splunk red hat systems administrator.

job summary: Description: We are seeking A Splunk Correlation & Orchestration Engineer who can develop custom detection content (correlation rules) and partner in developing security orchestration playbooks tied to these correlation rules.You will be working with two existing teams to implement our plan to expand our volume of detections and orchestrations and to more closely integrate these capabilities. We are currently consolidating our SIEM functionality onto the Splunk platform, and our Security Controls Orchestration team uses Splunk Phantom/SOAR. The SIEM consolidation presents new and exciting opportunities for expanded integration and automation, and you can apply your hands-on experience to help us achieve this.Your work will include the following typical duties:Work with different cyber teams (24X7 SOC Analysts, Cyber Intel, Insider Threat and Cyber Hunt) to elicit monitoring and orchestration requirementsAlert and correlation use case developmentOrchestration playbook developmentYou will also be joining us as we begin to evaluate the next phase of our SIEM modernization, including Splunk Enterprise Security. Required Skills Minimum 3 years of experience with Splunk SIEM detection/correlation rule developmentExposure to/familiarity with the Splunk SOAR (formerly Phantom) platform, with hands on playbook development experience preferred.Must have demonstrated ability to tune the SIEM event correlation rules and logic to filter out security events associated with known and well-established network behavior, known false positives and/or known errorsAbility to quickly explore, examine and understand complex problemsSense of urgency and ownershipPreferred ExperienceExperience integrating Splunk SIEM and SOARKnowledge of event sources including FireEye, Windows Servers, Linux Servers, etc.Intermediate-level proficiency with PythonDirect experience with Splunk Enterprise Security and associated Apps Specific Skillsets Required and/or Desired Splunk SIEM experience - focused on content/use case development (versus administration/ingest)Splunk SOAR (Phantom) experience Top Job Qualifications Splunk SIEM experience - focused on content/use case development (versus administration/ingest)Splunk SOAR (Phantom) experience   location: Denver, Colorado job type: Contract salary: $83 - 93 per hour work hours: 9am to 5pm education: Bachelors   responsibilities: You will be working with two existing teams to implement our plan to expand our volume of detections and orchestrations and to more closely integrate these capabilities. We are currently consolidating our SIEM functionality onto the Splunk platform, and our Security Controls Orchestration team uses Splunk Phantom/SOAR. The SIEM consolidation presents new and exciting opportunities for expanded integration and automation, and you can apply your hands-on experience to help us achieve this.Your work will include the following typical duties:Work with different cyber teams (24X7 SOC Analysts, Cyber Intel, Insider Threat and Cyber Hunt) to elicit monitoring and orchestration requirementsAlert and correlation use case developmentOrchestration playbook developmentYou will also be joining us as we begin to evaluate the next phase of our SIEM modernization, including Splunk Enterprise Security.   qualifications: Experience level: ExperiencedMinimum 8 years of experienceEducation: Bachelors  skills: Quality Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status. For Colorado Residents Only: The hourly range for Colorado residents is $15.00 to $25.00/hour. Pay is based on several factors including but not limited to education, work experience, certifications, etc. In addition to your salary, Randstad offers a comprehensive benefits package, incentive and recognition program, and 401K contribution (all benefits are based on eligibility). For certain assignments, Covid-19 vaccination and/or testing may be required by Randstad's client or applicable federal mandate, subject to approved medical or religious accommodations. Carefully review the job posting for details on vaccine/testing requirements or ask your Randstad representative for more information.

job summary: Randstad technologies is looking for a data analyst to support our telecommunications client! This is a long term contract opportunity and will be 100% remote for the duration of the project. In this role, you will be supporting our client's video platform, and working with many teams across the organization to ensure that the platforms are working effiecently as possible. You will be working in large datasets to understand trends, and create dashboards to organize variuos data sources and datasets using Grafana and Promethus.   location: VIRTUAL, VIRTUAL job type: Contract salary: $55 - 58 per hour work hours: 8am to 4pm education: Bachelors   responsibilities: build dashboards and alerts in Grafanacreate complex dashboards in an application like Splunk or KibanaUse different data aggregation and trend analysis styles across multiple data setswrite queries against Prometheus datasets or Splunk queriesanalyze data sets to establish "normal" trends vs "anomalies"utilizing Git (or writing markdown) for documentation and explanation of methodologies utilized   qualifications: Experience level: Minimum 6 years of experienceEducation: Bachelors  skills: Data AnalysisData WarehouseGrafanaPrometheusBusiness Intelligence Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status. For Colorado Residents Only: The hourly range for Colorado residents is $15.00 to $25.00/hour. Pay is based on several factors including but not limited to education, work experience, certifications, etc. In addition to your salary, Randstad offers a comprehensive benefits package, incentive and recognition program, and 401K contribution (all benefits are based on eligibility). For certain assignments, Covid-19 vaccination and/or testing may be required by Randstad's client or applicable federal mandate, subject to approved medical or religious accommodations. Carefully review the job posting for details on vaccine/testing requirements or ask your Randstad representative for more information.

job summary: Do you enjoy information security research and threat intelligence? Do you have experience developing detections? Would you like the opportunity to research the latest threats and techniques used by attackers? This position is on our Threat Intelligence and Detection Engineering (TIDE) team and we are looking for a cyber security professional with experience or education in tactical cyber-attack evaluation, threat hunting, exploit testing and analysis, cyber threat intelligence for Cloud environments. The individual is driven and passionate about following new developments in the threat landscape. LocationEnglewood, CO Experience7 years of experience Employment TypeContract To Hire   location: Englewood, Colorado job type: Contract salary: $70.92 - 79.78 per hour work hours: 8am to 4pm education: Bachelors   responsibilities: Do you enjoy information security research and threat intelligence? Do you have experience developing detections? Would you like the opportunity to research the latest threats and techniques used by attackers? This position is on our Threat Intelligence and Detection Engineering (TIDE) team and we are looking for a cyber security professional with experience or education in tactical cyber-attack evaluation, threat hunting, exploit testing and analysis, cyber threat intelligence for Cloud environments. The individual is driven and passionate about following new developments in the threat landscape. Responsibilities: Research into new methodologies to detect and prevent both common and emerging threats in Cloud environmentsCurate tactical and strategic information from multiple intelligence and data sourcesResearch threat actors and their associated tools, tactics, procedures, and goalsResearch emerging threats from malware samples, exploitation attempts, and other evidence of staged malicious infrastructure and activityMonitoring of current threats against the enterprise and providing analysis of effective proactive and reactive capabilities to reduce riskTracking of common and emerging attacker Tactics, Techniques and Procedures (TTPs) and their respective detection and prevention opportunitiesCollaborate with Incident Response, Security Operations, Security Analytics, Network Security, and Endpoint Security teamsSupport Threat Detection and Response teamsSupport incident responders during active investigations and incidents Minimum Qualifications: Understanding of cloud computing in infrastructure and operations for Paas, Iaas, SaaS, etc.Understanding of networking fundamentals relevant to information security Understanding of common network application protocols such as HTTP, DNS, SSH, FTP, SFTP, etcUnderstanding of endpoint and network forensics conceptsUnderstanding of common network security solutions such as firewalls, IDS/IPS, antivirus, EDR, etcUnderstanding of common attacker TTPs and detection methodologies Familiarity with security vulnerabilities, exploits, and detectionsExperience utilizing SIEM solutions for endpoint and network event analysis and correlation Experience with Breach and Attack Simulation toolsExperience with adversary emulation concepts, purple teaming, and driving to improved detection solutionsExcellent written and verbal communication skills Preferred Qualifications: Bachelors degree in Business Administration, Computer Science, Social Science, Mathematics, or related fieldEight (8) years experience in IT or a related field, including Minimum Five (5) years combined experience in cyber security operations, threat intelligence, or incident responseAdditional equivalent work experience may be substituted for the degree requirement.Holds applicable certification(s) such as GIAC GDAT, GXPN, GCIAExperience with common EDR architecture, weaknesses, and bypassesExperience with developing custom Splunk dashboards Experience with programming or scripting languages, such as Python, Javascript, C, C++, etcExperience building out labs for testing threat actor malware and TTPsFamiliarity with MITRE ATT&CK Framework   qualifications: Experience level: ExperiencedMinimum 7 years of experienceEducation: Bachelors  skills: Network Security Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status. For Colorado Residents Only: The hourly range for Colorado residents is $15.00 to $25.00/hour. Pay is based on several factors including but not limited to education, work experience, certifications, etc. In addition to your salary, Randstad offers a comprehensive benefits package, incentive and recognition program, and 401K contribution (all benefits are based on eligibility). For certain assignments, Covid-19 vaccination and/or testing may be required by Randstad's client or applicable federal mandate, subject to approved medical or religious accommodations. Carefully review the job posting for details on vaccine/testing requirements or ask your Randstad representative for more information.