IT-Security Consultant (Splunk)

1/2024 – offen

• Operating Splunk Cloud Environment.
• Log sources onboarding
• Developing security use cases with Splunk ES
• CIM data normalization
• Creating Splunk dashboards, alerts and reports.
• Data source optimization & Insurance if data quality
• Periodic health checks.
• Integrating Splunk with Service-NOW for creating incidents and tickets
automatically.

Consultant

11/2022 – 6/2024

Support/Troubleshooting
• Data volume reduction with Cribl (pipelines & routes)
• Infrastructure best practices
• Infrastructure and Splunk sizing
• Splunk searches optimization
• Security Use cases optimization
• Configuration according to Splunk best practices

Consultant

1/2022 – 10/2022

Configuration for new multi-tenant Splunk environments as MSP
• Development of Splunk searches, use cases, dashboards and reports
• Training the team in Splunk operations
• Configuration and further development of content in Splunk Enterprise Security and
other Splunk apps
• Data connectivity and ensuring quality assurance of data sources

Consultant