SIEM Engineer

Job Description

As a Barclays SIEM Engineer, you will be working within the CSO Security Engineering Technology Services team, responsible for understanding, researching, designing, developing, operating, and enhancing security solutions with the products Barclays has acquiredfor consumption as a service offering across all of Barclays. You will collaborate with Security Operations (mainly Cyber) teams to support in implementation of new technical solutions, on-board new data into Splunk and develop use cases to meet the businessrequirements.Barclays is one of the worlds largest and most respected financial institutions, with 329 years of success, quality and innovation behind us. We offer careers that provide endless opportunityhelping millions of individuals and businesses thrive, andcreating financial and digital solutions that the world now takes for granted.Working FlexiblyWere committed to providing a supportive and inclusive culture and environment for you to work in. This environment recognises and supports ways to balance your personal needs, alongside the professional needs of our business. Providing the opportunityfor all our employees, globally to work flexibly empowers each of us to work in a way that suits our lives as well as enabling us to better service our customers and clients needs. Whether you have family commitments or youre a carer, or whether you needstudy time or wish to pursue personal interests, our approach to working flexibly is designed to help you balance your life. If you would like some flexibility, then please discuss this with the hiring manager, and your request will be reviewed subject tobusiness needs.We are currently in the early stages of implementing a hybrid working environment, which means that many colleagues spend part of their working hours at home and part in the office, depending on the nature of the role they are in. Were flexible on how thisworks and it may continue to change and evolve. Depending on your team, typically this means that colleagues spend a minimum of between 20% to 60% of their time in the office, which could be over a week, a month or a quarter. However, some colleagues may chooseto spend more time in the office over a typical period than their role type requires. We also have a flexible working process where, subject to business needs, all colleagues globally are able to request work patterns to reflect their personal circumstances.Please discuss the detail of the working pattern options for the role with the hiring manager.What will you be doing

• Building, maintaining and operating Splunk Enterprise and Splunk Enterprise Security
• Evaluating and analysing business requirements and designing suitable solutions, challenging requirements where necessary
• Managing, co-ordinating and implementing technical project activities and enhancements to services
• Conducting Incident/ Problem/ Recovery activities
• Supporting the Joint Operations Centre and incident response teams for detected security events
• Operating controls as defined within the Barclays IT standards and policies and as directed by various Global Information Security initiatives
• Creating and maintaining accurate and high quality documentation
• Supporting Operational effectiveness audit

What were looking for:

• Knowledge of Splunk Enterprise architecture, distributed components (indexer clusters, forwarders, search head clusters, deployment servers)
• Knowledge of Splunk Enterprise Security at administration and use case level
• Knowledge on on-boarding new data into Splunk
• Knowledge of the Common Information Model, data models, enrichment, and automation

Skills that will help you in the role:

• Professional certification in Splunk Enterprise
• Experience with scripting/ programming languages, Python, PowerShell, Chef, SQL
• Experience of cloud technologies AWS, Azure and SaaS based security solutions and automation in an operational environment: Chef, Ansible
• Knowledge of Configuration Management tools chef, puppet, Ansible and Version Controlling toolsbitbucket, git

Where will you be workingYou will be based in Radbroke, Knutsford. The Barclays Technology Campus just outside Manchester is our tech command centre and a vital strategic powerhouse behind our global operations. The campus is set in a 64 acre self-contained site, in a beautifulgreen environment and it offers unrivalled facilities for work and for play. We have an onsite gym, as well as outdoor tennis, football and cricket areas, as well as onsite restaurant and coffee shops.#LI-Hybrid