Staff Splunk Engineer (Information Security)

Job Description

Come join Palo Alto Networks as part of the Security Operations team as a Sr. Information Security Engineer specializing in log management. We are seeking creative problem solvers with a passion for innovation to join our team.

In this role you will be responsible for executing security related data engineering programs and managing data management platforms. You will be working very closely with the SOC and cross functional teams to manage and develop tools and infrastructure that enable the Information Security team to prevent, detect, contain and manage risks within the Palo Alto Networks Enterprise environment.

This is a fast-paced, post-startup environment. Successful candidates will be customer-oriented, results-driven and passionate about building great products that will impact across the organization.

• Extensive background in managing and engineering Splunk solutions within an enterprise environment; including design, implementation, and maintenance of all aspects of Splunk and its components

• Understand and interpret customer requirements for Splunk implementation for an enterprise solution.

• Provide deployment strategies with the understanding of affordable risk based on customer acceptance.

• Develop dashboards with visual metrics for stakeholders.

• Maintain the overall Splunk solution to include maintenance, enhancements and integration.

• Support testing of new integrations for infrastructure and production performance.

• Develop and manage Splunk data visualizations, reports, alerts, searches, dashboards for information security programs.

• Collaborate with internal customers to establish strong requirements and develop project plans to deliver products and services.

• Partner with security engineers, threat management staff and infrastructure engineers to build security products that help secure the brand, trust and customer experience.

• Work closely with the security operations team to transfer knowledge and operational process to publish services for run-the-business consumption of developed solutions.

• Participate in working groups to problem solve and identify methods to improve or enhance existing tools, products and services.

• Perform work on security data analytics involving data mining, ETL, machine learning and data visualization.

• Assist with security incidents, investigations, root-cause analysis and support real-time tools development to enable prevention, or to drive down detection and containment times in partnership with the Security Operations and Engineering teams.

• Adopt and evangelize our prevention oriented network security architecture, and embody the role of first customer of Palo Alto Networks’ product suite.

Qualifications

• US citizen or permanent resident (green card holder)

• Bachelor degree in Computer Science or related field or equivalent experience/training, Master’s Degree in Computer Science a plus

• Knowledge of and practical experience of integration of open source tools into Splunk

• 3+ years experience in managing Splunk platform

• Strong in Splunk search language and Regular Expression

• Strong understanding of logging technologies (Syslog, Windows Events and UNIX logging).

• Extensive knowledge of tier Splunk installation, indexers, forwarders, search heads, clustering.

• Experience in at least one scripting language preferably Python, Perl, Ruby, PowerShell or Shell script

• Experience in working and developing in both Unix/Linux and Windows environments

• Knowledge of network devices, firewalls, IDS/IPS, TCP/IP protocols, and general network architecture

• Knowledge in MySQL, Postgres, SQL, RESTful API a plus

• Knowledge of statistical and predictive modeling concepts, machine-learning approaches, clustering and classification techniques, and recommendation and optimization algorithms.

• Excellent written and verbal communication skills

• Experience with Agile development, SCRUM or extreme programming methodologies

• Ability to establish priorities, work independently and proceed with objectives

• Must be well organized and able to leverage best practices, able to thrive in fast-paced environment, and, most importantly, have the ability to approach problems with an innovative, can-do attitude

• SF Bay Area (Santa Clara, CA) preferred, but will consider remote location within United States

• Splunk certifications are a plus

• Experience with Cloud computing (AWS or GCP) a plus

• CNSE (Palo Alto Networks), CCNP, CCIE, CISSP/CISM, SANS GIAC, or other Networking and Security certifications a plus

• Security engineering experience across the stack (Network, Application, Physical layers) a plus

• Experience with multiple technologies including Hortonworks, Cloudera, Cassandra or other Big Data Solutions, ELK or other Data Collection and Aggregation Solutions

• Bachelor's degree from four-year college or university; or equivalent training, education, and experience in information / cyber security, computer systems, IT, etc.

Additional Information

We’re trailblazers that dream big, take risks, and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. To learn more about our culture and dedication to inclusion and innovation, visit our careers page.

Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics.

Additionally, we are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or an accommodation due to a disability or special need, please contact us at [emailprotected]

Learn more about the amazing work experience at Palo Alto Networks here!

#LI-MT1

All your information will be kept confidential according to EEO guidelines.