Splunk Data Administrator
Capgemini Hong Kong Limited
- Company Industries：Information Technology
Job Information
- Post Date：2022-05-20
- Location：Southern Area
- Employment Type：Full Time, Permanent
- Job Function：Information Technology (IT) Security
Job Description
We have an exciting opportunity for a Splunk Data Administrator to join us in Hong Kong.
Job Purpose
This role is part of the Group IT Function and has a main responsibility for supporting Group IT Security with activities related to data onboarding and Splunk Use Cases Development of Global Cyber Security Operations under Cyber Detection & Response Team.
This role will be accountable for Data onboarding and management. It requires the ability to understand how to get remote data into Splunk indexer. It covers installation, configuration, management, monitoring and troubleshooting of Splunk forwarders.
This role is expected to work with Strategist, Technical contacts and SOC Managers to onboard the required log sources. He mainly ensures that the data is correctly onboarded and in the right format (properly parsed and normalized)
This role will temporarily report to the respective HK SOC Manager and be under the strategic direction of Global Senior Cyber Security Operations Manager with the assistance of Top-level management.
Key Responsibilities
Data Onboarding
- Work with users requesting new data sources
- Document existing and newly ingested data sources.
- Design and manage input for Splunk universal and heavy forwarders to capture data
- Manage log source parsing/formatting, event line breaking, timestamp extraction
- Deploy changes to production
- Manage Splunk Configuration files
- Install and manage Splunk apps
- Assist on the integration and automated onboarding of application logs.
Person Specification
- Degree holder in Computer Science or related disciplines, or appropriate extensive experience.
- At least 2 years experiences onboarding data on Splunk environment.
- Obtained at least Splunk Fundamental 2/3 or various Splunk E-learnings
- Certified Splunk Enterprise Security Administrator or Splunk Enterprise Admin is highly preferred.
- At least 5 years experiences in Information Security
- Have a good knowledge of the business, analytics, data visualization and modelling.
- Strong problem-solving skills and fast learner.
- Liaison skill & teamwork, passion & commitment mentality
- Good interpersonal and communication skills.
- Fluent in spoken and written English
Technical Requirements
- Experience working on different data input types (file and directories, network data, script output, Linux and windows logs, DB connect, HTTP etc.)
- Broad knowledge and understanding of Network data, Syslogs and able to troubleshoot data ingestion issues.
- Broad knowledge and understanding of Computer operating systems (Windows and Unix/Linux)
- A basic understanding of directory and identity management services.
- A basic understanding of cloud computing and infrastructure.
- A basic understanding of server and service operations.
- A general understanding of Attacker tools such as Remote exploit kits, Remote Access Tools etc.
- A high level of understanding of Attack taxonomy such as MITRE ATT&CK, Lockhead Martin Kill chain, Diamond model etc.
- A development/programming background is a big plus.
- Experience writing Regex (Regular Expression) is a big plus
Let's talk about what's in it for you!
Passionate people are Capgemini's Ace of Spades - join us to discover a career that will challenge, support and inspire you. Working at Capgemini you'll find the rewards are more than just financial. You will work alongside some very smart and inspiring people on exciting projects and you will also enjoy incredible benefits. We offer flexible work practices and 40 hours of self-development every year with a huge selection of learning opportunities to choose from.
As "Architects of Positive Futures", Capgemini actively supports the community in 3 ways:
Diversity and Inclusion - we believe diversity of thought fuels excellence and innovation, which is why we positively encourage applications from suitably qualified candidates regardless of their gender identity, ethnicity, sexual orientation, religion, ability, intersex status or age. To support our commitment to diversity and inclusion, we celebrate special events and days of significance that are important to our employees such as Diwali, Bastille Day, Pride, IDAHOBIT, IWD and International day of people with Disabilities. Our Employee Resource Groups [email protected] and OutFront support the grassroots passion of employees to drive our diversity agenda and effect change.
Digital inclusion - at Capgemini we are using our skills to drive social impact initiatives focusing on helping society address the impact of the digital and automation revolution. We also provide employees with opportunities to give back to the community through charity projects and volunteer days.
Environmental Sustainability - Capgemini joined the CDP's (Carbon Disclosure Project) prestigious "A list" for its commitment to the Net-Zero economy. We are focusing on helping our clients transform towards more sustainable business models and committing to reduce our own carbon emissions (GHG) by 20% per employee by 2020.
Recognised by Ethisphere as one of the World's Most Ethical Companies for the last 8 years in a row, ethics and values are at the heart of Capgemini's corporate culture and business. Embedded in our DNA, our seven values - Honesty, Boldness, Trust, Team Spirit, Freedom, Fun and Modesty - have remained the same since company inception in 1967. To see how we bring these values to life, click here to listen to some of our employee’s stories.
Come join us, bring your whole self to work, create new possibilities for you, your customers and your community and help us to be Architects of Positive Futures.
Company Info
Capgemini is a global leader in partnering with companies to transform and manage their business by harnessing the power of technology. The Group is guided everyday by its purpose of unleashing human energy through technology for an inclusive and sustainable future. It is a responsible and diverse organization of 300,000 team members in nearly 50 countries. With its strong 50 year heritage and deep industry expertise, Capgemini is trusted by its clients to address the entire breadth of their business needs, from strategy and design to operations, fueled by the fast evolving and innovative world of cloud, data, AI, connectivity, software, digital engineering and platforms. The Group reported in 2020 global revenues of EUR 16 billion.
| Position | Company | Location | Update |
|---|