Splunk Threat Content Developer – Cloud API Threat Detection (BHJOB22048_760)

Splunk Threat Content Developer – Cloud and API Threat Detection – Remote

The experience expected from applicants, as well as additional skills and qualifications needed for this job are listed below.

The Splunk Threat Content Developer will develop, implement, and oversee content development for Threat Detection, Threat Analysis, and Threat Investigations focused on Cloud Security and API Security. Bring your Splunk Content Engineering in Threat Detection, Threat Analysis, Threat Investigation, and Splunk Security Analytics for Cloud (Azure, AWS, SaaS, IaaS, PaaS) as well as API Security / OWASP threats.

Responsibilities :

• Lead Splunk content development focused on Threat Detection, analytics, investigation, and response for Cloud Security (SaaS / IaaS / PaaS) and API Security (OWASP) threat use cases.
• Focus on Cloud and API Threat Detection engineering, Content engineering, Splunk Enterprise Security, and Cloud and API Security Threat content.
• Develop and implement Custom Splunk content and dashboards for analysts on emerging Cloud / API threats.
• Provide threat visibility and awareness for the Cyber Security organization for new security capabilities.
• Engineer Splunk content for Cloud / API Security Threat Detection, alerting, dashboards, and IR runbooks.
• Develop Splunk Content for Cloud / API Security threat use cases including misconfiguration, vulnerabilities, and data exfiltration.
• Engineer Splunk content to monitor continuously for anomalous API traffic and remediate threats in near real-time.
• Engineer Splunk content for API Security Threat use cases including authentication issues and security misconfigurations.
• Engineer cloud threat Splunk correlation searches to provide alerting mechanisms used by the SOC.
• Review newly ingested data sources for potential security alerts and create dashboards.

Qualifications, Skills, and Experience :

Soft Skills :

LOGISTICS :

J-18808-Ljbffr