Design, implement, and continuously mature security architecture across endpoint, identity, network, cloud, and email domains * Act as primary to the external MSSP, reviewing and optimizing the Splunk Cloud SIEM and Cribl Stream/Edge data pipeline * Partner with Infrastructure, Cloud Admin, and Client Services teams to review, harden, and implement security controls (Defender for Endpoint, Intune, Proofpoint, Zscaler, Cisco FTD, FortiGate) * Advanced knowledge of Splunk Cloud SIEM (SPL, use-case development) and Cribl Stream/Edge
mehr