SIEM / Analytics
- Splunk Enterprise Security (ES)
- Splunk SPL (Search Processing Language)
Security Frameworks
- EDR/XDR (CrowdStrike, Defender)
- Firewalls
- IDS/IPS
- Wireshark
Cloud Security
- AWS Security Hub
- Azure Sentinel
Log Forwarding
- Splunk Heavy Forwarders
- Syslog-ng
Logistics Requirement
- 100% travel readiness for a 2-week onsite bootcamp in Dallas, TX.
Threat Detection & Monitoring
Monitor enterprise networks for security breaches using Splunk and other SIEM tools.
Incident Response: Investigate, contain, and remediate security alerts and vulnerabilities.
Log Management
Ingest, parse, and create dashboards/alerts for security logs across cloud and on-premise infrastructure.
Compliance & Auditing
Ensure security controls align with standard regulatory frameworks (NIST, ISO 27001, SOC2)