Cyber Risk Defense Consultant V - Splunk & Cribl Engineer

About the role

Cyber Risk Defense Consultant V - Splunk & Cribl Engineer at Kaiser Permanente is a technical expert in managing an enterprise Splunk environment supporting cyber threat missions. The role involves conducting or overseeing business-specific projects, leading team monitoring and response to threats, facilitating operations meetings, and driving the development of CRDC intellectual capital.

Responsibilities

• Conducts or oversees business-specific projects by applying deep expertise in subject area; promoting adherence to all procedures and policies; developing work plans to meet business priorities and deadlines; determining and carrying out processes and methodologies; coordinating and delegating resources to accomplish organizational goals; partnering internally and externally to make effective business decisions; solving complex problems; escalating issues or risks, as appropriate; monitoring progress and results; recognizing and capitalizing on improvement opportunities; evaluating recommendations made; and influencing the completion of project tasks by others.
• Promotes self-leadership and learning in others by building relationships with cross-functional stakeholders; communicating information and providing advice to drive projects forward; influencing team members within assigned unit; listening and responding to, seeking, and addressing performance feedback; adapting to competing demands and new responsibilities; providing feedback to others, including upward feedback to leadership and mentoring junior team members; creating and executing plans to capitalize on strengths and improve opportunity areas; and adapting to and learning from change, difficulties, and feedback.
• Leads team in the proactive monitoring and/or response to known or emerging threats against the KP network.
• Communicates investigative findings to non-technical audiences.
• Plans and facilitates regular operations meetings with CRDC teams.
• Supports closed loop processes on security efforts by providing feedback to TDA leads and/or leadership.
• Participates in information fusion procedures across operations and engineering, including activities such as Use Case planning/development, Use Case quality assurance validation, and response procedure documentation.
• Serves as a liaison between stage teams and upper management by identifying issues, improvement areas, or security/architectural gaps and suggesting appropriate improvements.
• Drives the development of the CRDC intellectual capital by leading process or procedure improvements, consulting on brown bag training sessions, and leading the development of new training documents.
• Partners with the CRDC Policy Engineers and Remediation teams to contain identified issues and determine the best approach for improving security posture.
• Facilitates follow-up remediation design and review efforts.
• Leads the investigation and triage of security events across multiple domains.
• Leads complex data analyses in support of security event management processes, including root cause analysis.
• Coordinates the response and resolution of high impact or critical cyber security incidents.
• Leads the deployment of threat detection capabilities and/or incident response plans which may include after-hours support and coordination among responsible teams.
• Drives the execution of incident detection and/or handling processes which may include containment, protection, and remediation activities.

Requirements

• Minimum two (2) years in an informal leadership role working with project or technical teams.
• Bachelor's degree in Business Administration, Computer Science, Social Science, Mathematics, or related field and Minimum eight (8) years experience in IT or a related field, including Minimum two (2) years in information security or network engineering. Additional equivalent work experience may be substituted for the degree requirement.
• One (1) year supervisory experience.
• Two (2) years of work experience in a role requiring interaction with senior leadership (e.g., Director level and above).
• Knowledge and professional enterprise experience supporting Splunk Enterprise and Splunk Cloud environments.
• Possess Splunk Architect and/or Splunk Administration Certification(s).
• Possess software development skills creating AI and ML models and detections.
• Professional experience and administration of large-scale Linux/Unix deployments.

Qualifications

• Minimum two (2) years in an informal leadership role working with project or technical teams.
• Bachelor's degree in Business Administration, Computer Science, Social Science, Mathematics, or related field and Minimum eight (8) years experience in IT or a related field, including Minimum two (2) years in information security or network engineering. Additional equivalent work experience may be substituted for the degree requirement.
• One (1) year supervisory experience.
• Two (2) years of work experience in a role requiring interaction with senior leadership (e.g., Director level and above).
• Knowledge and professional enterprise experience supporting Splunk Enterprise and Splunk Cloud environments.
• Possess Splunk Architect and/or Splunk Administration Certification(s).
• Possess software development skills creating AI and ML models and detections.
• Professional experience and administration of large-scale Linux/Unix deployments.

Skills

• Deep expertise in Splunk and Cribl environments.
• Ability to communicate investigative findings to non-technical audiences.
• Experience in Splunk architecture and administration.
• Software development skills in AI and ML models.
• Experience with large-scale Linux/Unix deployments.

Benefits

Our compensation and benefits are designed to help you and your family stay healthy and thrive in and beyond work.

Pay

• Pleasanton, CA: Competitive salary based on experience and qualifications.
• Corona, CA: Competitive salary based on experience and qualifications.
• Lake Oswego, OR: Competitive salary based on experience and qualifications.
• Atlanta, GA: Competitive salary based on experience and qualifications.
• Hyattsville, MD: Competitive salary based on experience and qualifications.
• Renton, WA: Competitive salary based on experience and qualifications.
• Honolulu, HI: Competitive salary based on experience and qualifications.

Schedule

• Pleasanton, CA: Full-time, Day.
• Corona, CA: Full-time, Day.
• Lake Oswego, OR: Full-time, Day.
• Atlanta, GA: Full-time, Day.
• Hyattsville, MD: Full-time, Day.
• Renton, WA: Full-time, Day.
• Honolulu, HI: Full-time, Day.