Sr. Engineer, IT Security

Raymond James • Saint Petersburg, FL

10d • Hybrid

About The Position

The financial services industry is constantly under attack by sophisticated cyber adversaries that range from nation states to criminals. In response, the Raymond James Cyber Threat Center (CTC) is charged with ensuring all equities are secure against all tiers of adversaries. We are the central hub for Computer Network Operations and are on the front lines of security incident response, threat hunting, and intelligence. You'll be working with emerging technologies to solve challenging security problems in a fast-paced and continuously evolving environment, while helping steer the direction and evolution of the team. This highly visible team within the organization evaluates threats to the environment and dynamically adjusts to the ever-changing threat landscape by applying practical security knowledge to developing new detective measures to protect the firm. The CTC Sr. Engineer, IT Security, is a primary member of the CTC who serves as a Splunk subject matter expert responsible for the development, creation, and maintenance of advanced Splunk content used in support of the Incident Response (IR), HUNT, Cyber Threat Intelligence, and Cyber Crime operations. The Sr. Engineer is also part of Raymond James Splunk administration team, responsible for the operation and maintenance of Raymond James Splunk cloud environment that includes search heads, indexers, heavy/universal forwarders, and the enterprise syslog environment. Job Description This position follows our hybrid workstyle policy: Expected to be in a Raymond James office location a minimum of 10-12 days a month. Please note: This role is not eligible for Work Visa sponsorship, either currently or in the future.

Requirements

• 7+ years of related experience in Splunk engineering, administration, and content development
• System administrator experience in Linux, Windows, or OSX operating systems
• System administrator experience in maintenance and management of enterprise syslog environment
• Knowledge of networking and the common network protocols
• Experience with development of complex Splunk analytics
• Familiar with interacting with a variety of APIs and using an API platform such as Postman, Insomnia, or Hopscotch to develop and test data integration
• Demonstrated ability to create complex scripts, develop tools, or automate processes in PowerShell, Python or Bash.
• One or more of the following Certifications: Splunk Cloud Certified Admin Splunk Certified Architect Splunk Certified Consultant CISSP: Certified Information Systems Security Professional CCNA: Cisco Certified Network Associate

Responsibilities

• Provide engineering and administration for a large distributed Splunk environment consisting of search heads, indexers, deployers, deployment servers, and heavy/universal forwarders
• Administer the global Syslog-NG environment
• Develop, create, and maintain advanced Splunk content
• Think outside the box to rebuild Splunk workflows using best practices to improve SVC utilization
• Configure, administer, and tune Splunk Cloud environment
• Onboar d new Splunk event sources, data feeds, apps, and devices
• Maintain and review data integrity of Splunk data feeds into the Splunk.
• Act as a Splunk Subject Matter Expert for team
• Shares in a weekly on-call rotation and acts as an escalation point for major incidents and associates of Raymond James.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees