Description

Decskill is 100% Portuguese technological company, founded in 2014, and we currently have more than 200 employees. Decskill operates in both national and international markets, with offices in Lisbon, Oporto and A Coruña, capable to provide services to any location in the national territory.

How can Decskill be an accelerator to your career?
We currently operate in 3 major areas: outsourcing by DECSKILL; augmented reality and computer vision products and solutions, by PROSKILL; and Agile training and coaching, by GETSKILL.
The success of Decskill is built from the inside out, with talented employees and constant evolution, with innovative aspirations and a commitment to make a difference.
We are looking for a Security consultant - SPLUNK for a project based in Amsterdam.

Description 
 
You will be part of the Application Security Management Team. The objectives of this team are to  design and develops new use cases based on application logs . The team is mainly focused on threats related to applications, application logs.
 
Requirements

• Advanced experience with SPLUNK
• At least 5 years of experience in IT Security 
• The team goal is to onboard hundreds of applications which are developed by DevOps teams within the client organization. 
• The ASM team will reach out to those DevOps team, select and design the right use cases, ingest there logging into Splunk, normalize the data to a CIM (Common Information Model) and connect them to the use cases to prevent them against cyber-attacks. 
• Based on those use cases Splunk will generate alerts in ServiceNow which will be send to the application owner who need to take action. 
• All use cases should be developed as generic as possible so that several teams can make use of the same use cases.
• Analysis / design skills
• Threat analysis skills to talk to the application owners and design new use cases that monitor applications from a business perspective.

Soft Skills

• Good communication skills
• Business analysis skills
• Information analysis skills
• Committed
• Team player

Remote work is possible to start due to the coronavirus pandemic. However, relocation will be mandatory once the situation is better.

If you’re interested in this job please send your CV in English to [email protected], with the reference “JM/Splunk”.
Thank you!