28.10.2026 aktualisiert
verifiziert
Premiumkunde
40 % teilweise verfügbarSIEM|Big Data Consultant | Splunk | Splunk Enterprise Security|Splunk Cloud|Cribl
Bonn, Deutschland
Weltweit
InformatikSkills
JavaScriptAgile MethodologieArchitekturAtlassian ConfluenceBash ShellBig DataCSSCloud ComputingScrumSiemExtensible Markup LanguageRechnerarchitekturSplunk
Splunk Enterprise Security
Splunk
Splunk Cloud
Splunk Attack Analyzer
Log Management
Cribl
Stream Data Processing
Big Data
Jira
Confluence
Scrum
Agile Entwicklung
Bash scripting
JavaScript
CSS
XML
Exabeam
Erfahrung
Berufserfahrung5 - 10 Jahre
Freelancer seit2021
Sprachen
ArabischMutterspracheDeutschverhandlungssicherEnglischverhandlungssicher
Projekthistorie
a) Build a Splunk Enterprise Security instance utilizing the right sized Infrastructure on Customer’s
premises, Customer’s Cloud or Splunk Cloud
b) Support customer in selecting IT Security Use Cases and identifying log sources
c) Ingest all logs from systems identified in data sources identified by Customer in project
d) Perform Data Normalization activities
e) Deploy Splunk base Apps and related use cases for data sources defined below (e.g. File servers, Palo
Alto Firewalls, Active Directory and Mail Servers)
f) Deploy IT Operations Splunk base apps (licenses permitting)
g) Create Initial User access and set up administration privileges for customer IT staff
h) Redirect Splunk notable alerts to ServiceNow or another IT Ticketing and Service Management tool
j) Support and maintenance requests to Splunk will be through the support contract.
premises, Customer’s Cloud or Splunk Cloud
b) Support customer in selecting IT Security Use Cases and identifying log sources
c) Ingest all logs from systems identified in data sources identified by Customer in project
d) Perform Data Normalization activities
e) Deploy Splunk base Apps and related use cases for data sources defined below (e.g. File servers, Palo
Alto Firewalls, Active Directory and Mail Servers)
f) Deploy IT Operations Splunk base apps (licenses permitting)
g) Create Initial User access and set up administration privileges for customer IT staff
h) Redirect Splunk notable alerts to ServiceNow or another IT Ticketing and Service Management tool
j) Support and maintenance requests to Splunk will be through the support contract.
- Eigenständige Projektorganisation und -durchführung in diversen Endkundenprojekten
- Planung der SIEM Architektur (Komponenten, Sizing, Anbindung)
- Beratung zu Detection Scenarios und Use Cases für das SIEM
- Data Source Onboardings in komplexen IT Landschaften
o Beratung und Austausch mit Datenquellen- und Netzwerkverantwortlichen
o Implementierung des Forwarding Tiers
o Implementierung Data Parsing und Normalization
- Implementierung Detection Scenarios / Use Cases
- Tunings für Detection Scenarios und Use Cases
- Technische Dokumentation
- Planung der SIEM Architektur (Komponenten, Sizing, Anbindung)
- Beratung zu Detection Scenarios und Use Cases für das SIEM
- Data Source Onboardings in komplexen IT Landschaften
o Beratung und Austausch mit Datenquellen- und Netzwerkverantwortlichen
o Implementierung des Forwarding Tiers
o Implementierung Data Parsing und Normalization
- Implementierung Detection Scenarios / Use Cases
- Tunings für Detection Scenarios und Use Cases
- Technische Dokumentation