Principal Security Architect - Splunk

When you join Verizon

Verizon is one of the world’s leading providers of technology and communications services, transforming the way we connect across the globe. We’re a diverse network of people driven by our shared ambition to shape a better future. Here, we have the ability to learn and grow at the speed of technology, and the space to create within every role. Together, we are moving the world forward – and you can too. Dream it. Build it. Do it here.

What you’ll be doing...

Verizon is a Fortune 500 company and takes pride in servicing 99% of Fortune 500 companies as well as Government Agencies around the world. In Canberra, we run two key business units - the Government Security Operations Centre (GSOC) and Advanced Security Operations Centre (ASOC) that support a number of Australian Government agencies. Our operations centres are focused around collaboration and success and you will be a part of a skilled operations team managing dynamic multi-tenanted and dedicated secure gateway environments.

Verizon has an opportunity within ASOC team for a Principal Security Architect, this role is designed to provide senior capability for the architecture and design of the Splunk platform and associated integrations that support our gateway customers. You will work with both project and operations teams to scope and grow the Splunk platform and help develop and integrate new services that leverage the capability, including cloud-based Splunk services.

• Overall Splunk Architecture and supporting design documentation.
• Leverage advanced knowledge of security operations, cyber security tools, intrusion detection, and secured networks to integrate with the Splunk platform.
• Splunk installation, configuration, management and fault-finding.
• Act as an escalation point for the Security Analysts to assist and advise on the most complex security threat investigations.
• Support customers in implementing sound and secure logging practices.
• Determine and report the accomplishments of project initiatives across stakeholder groups, providing consulting and guidance on how to drive business results from the data available.
• Review and enhance logging information flow strategies and technical information flow required for log onboarding and the associated work plans.
• Work with Pre-Sales and operations teams to scope capacity and enhancements needed to on-board new capabilities within Splunk.

In this hybrid role, you'll have a defined work location that includes work from home and assigned office days set by your manager.

What we’re looking for...

You'll need to have:

• Bachelor’s degree or four or more years of work experience.
• Six or more years of relevant work experience.
• Six years of experience in information technology and/or cyber security, with an emphasis on data and/or security analytics.
• Industry certifications such as Splunk Enterprise Certified Architect, Cloud Certified Admin and Enterprise Security Certified Admin.
• Splunk and/or SIEM administration, configuration, and optimisation experience.
• Current or recent Australian Government security clearance at minimum NV1 level.

Even better if you have:

• Bachelor’s degree or at least six years work experience in information technology and/or cyber security.
• Experience with Splunk Cloud.
• Experience working in a SOC, or alongside SOC analysts.
• Experience with SOAR platforms, particularly Palo Alto XSOAR.
• Sound written and oral communications skills, be articulate in explanations, and communicate in a clear positive fashion with internal and external stakeholders, clients, and suppliers, covering highly complex solutions.
• Experience with other SIEM platforms, including QRadar and Sentinel.
• Experience preparing and delivering presentations to peers or senior executives.
• Ability to negotiate, when warranted, in order to work with other teams.
• Ability to grasp and assess “big picture” issues and bring them to light in order to foster positive change for a robust data ingestion platform and processes.

Diversity & Inclusion

We're proud to be an equal opportunity employer. At Verizon, we know that diversity makes us stronger. We are committed to a collaborative, inclusive environment that encourages authenticity and fosters a sense of belonging. We strive for everyone to feel valued, connected, and empowered to reach their potential and contribute their best. Check out our diversity and inclusion page to learn more.

COVID-19 Vaccination Requirement

Please note, in countries where there is a COVID-19 related government order or rule, Verizon is required to ensure that all employees accessing our workplace comply with these mandatory requirements. If you work in one of these locations, you will be required to provide us with your vaccination status prior to joining. If this, or any other COVID related requirement applies in your location, we will notify you about this before you start work.