OT SOC Senior SIEM Architect
We have an opportunity for an OT SOC Senior SIEM Architect to join our team in Bucharest. This is a hybrid role, 3 + 2 days model. This position will be a part of the Industrial\nCyber-Security team and will participate in delivering and developing cyber\nsecurity services for a wide range of industrial global customers. The position\nwill have a direct reporting relationship to the Global Security Operation\nCenter Manager and Incident Response Lead and work as part of a global managed\nservices team. The position requires very good cyber security knowledge,\nexcellent analytical skills, and proficient handling of specific tools such as\nSIEMs and Security Orchestration, Automation and Response platforms. A\nsuccessful candidate would be able to deploy and maintain our SIEM and SOAR\ntechnology.
Honeywell
We have been innovating for more than 100 years and now we’re creating what’s next. Our programs serve a global community and our hometowns too. We provide resources and financial support to causes around the world and encourage employee volunteerism. We are committed to the highest standard in everything we do!
Key responsibilities:
Support day-to-day operation of a highly available distributed multi-clustered multi-tenant Splunk deployment;Support onboarding and maintenance processes of a wide variety of data sources to include various OS, appliance, and application logs;Support troubleshooting and remediation of issues as they arise with data ingestion and coordinating and conducting event collection, log management, event management, compliance automation, and identity monitoring activities;Administering our Security Orchestration, Automation and Response (SOAR) platform and performing SIEM architecture assessments, design reviews and come up with areas of improvements;Playbooks development/implementation and integrations with Splunk SOAR /Phantom.Key skills and qualifications:
Bachelor’s degree in a computer related field such as Computer Science, Information Technology, or other relevant fields;At least 5 years of experience performing Splunk administration;Understanding of Splunk Deployment Methodology and best practices for planning;Data collection and sizing for a distributed deployment, and able to manage and troubleshoot a standard distributed deployment with indexer and search head clusteringlCertifications: Splunk Enterprise Certified Admin/ Architect, Splunk SOAR Administration, Python scripting skills for automation.Our offer:
Competitive Salary regularly increased based on your performance;Enjoy 25 vacation days per year, plus extra days off for life's special events;We provide meal vouchers;Flexible benefits basket with monthly budget allocated (top up medical insurance, life insurance, pension, vacation/ cultural/ fuel vouchers);Medical Insurance Plan paid by the company;Christmas and Easter bonuses;Recognition & referral bonus programs;Comprehensive induction, ongoing training and development to set you up for success;In-house and external learning platforms (Udemy) to continue to expand your skills;Work experience opportunities to help you grow your career with us;Global employee networks to help you connect and grow;Employee Assistance Program - Free and confidential service to help with any difficulties regarding work, life and personal or family matters;In case of unfortunate events, we support you by offering you free days and financial support (handled on a case by case basis) or Family financial aids;Access Integrity line - Any workplace issues or violations that need to be raised in good faith, can be communicated in a safe, private and confidential environment;Your family is growing while working at Honeywell? We congratulate you by offering special bonuses;Frequent Employee Engagement activities fostering an inclusive and diverse work environment ;3 + 2 hybrid work arrangement to support your work-life balance;Flexible working hours;Fresh fruit days in the office.If this is your dream role, then we'd love to hear from you.
We are an equal opportunity employer and value diversity at our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment.
#Li-Hybrid
Additional InformationJOB ID: HRD247505Category: EngineeringLocation: 3 George Constantinescu,,Upground building, 5th floor (entrance A) District 2,Bucharest,BUCURESTI,020339,RomaniaExemptEngineering (EMEA)