Contract

Trend Micro Tools Specialist – SC Cleared

Ref: BBBH63165_1740568527

Anywhere

Whitehall Resources are currently looking for a Trend Mirco Tools Specialist – SC Cleared.

You will be required to use an FCSA Accredited Umbrella Company for this role.

Must not have been outside of the UK for more than 6 months in the last 5 years.

Key Requirements:

– Has designed, architecture and deployed the Qradar SIEM solution as an „all-in-one“ solution.
– Has architected for High Availability (mirroring) and failed over.
– Competent on configuring log sources using Wincollect and configuring the Custom Rules Engine (CRE).
– Technical knowledge across a range of SIEM platforms (MS Sentinel, QRadar, DEVO, Splunk, Huntsman etc).
– Onboarding of Data Sources, Logs/Event sources to the SIEM platform.
– SIEM platform tuning / configuration / parsing / Removal of false positives.
– Production of SIEM Use cases & Playbooks.
– SIEM Platform Capacity Management.
– SIEM Platform Level 3 Device Maintenance.
– Vendor engagement for software updates.
– SIEM Platform Testing.
– Execution of technical integrations identified by the Lead Security TDA & Security TDA.
– Process any Unresolved Issues, False Positives and Create Advanced Correlation rules.
– Implement Use cases in Production & Run books.
– Improve/Integrate New Technological Components to reduce MTTD and MTTR.
– Validate Logging as per Logging Framework.
– Manage Tooling issues and Licensing.

All of our opportunities require that applicants are eligible to work in the specified country/location, unless otherwise stated in the job description.

Whitehall Resources are an equal opportunities employer who value a diverse and inclusive working environment. All qualified applicants will receive consideration for employment without regard to race, religion, gender identity or expression, sexual orientation, national origin, pregnancy, disability, age, veteran status, or other characteristics.