I need help please

[Skyion]

I received this message from recruiter today. i need help. am still in the process of learning splunk. 

Hi Kenechi,

We have a remote and long term contract opening for a Sr. SIEM Consultant with our client who is a large Canadian Grocery retailer.

In this role you will be responsible for the organization's Splunk platform. This includes advising on strategy/technical problems, executive engagement, managing the MSSP, creating various metrics/reports, and more.

The position offers a competitive contract rate with high probability of extension.

Please let me know if you or a colleague might be interested in this exciting opportunity with a leading Canadian enterprise?

[PickleRick]

OK. And what is it you're seeking from us here?

Are you looking for people who fit the description? If so, this is not a very good place to do so. As the TOS for Splunk services state you agreed that you will not:

"Use the Site to advertise or offer to sell or buy any goods or services without Splunk’s express prior written consent."

So posting ads looking for employers is not permitted here.

If you want to learn because you want to fill this position, as @livehybrid said - that's probably not for you. If you're just "in the process of learning Splunk" without anything more precise about it, that job description seems way above your proficiency level. Depending on the time and effort you want to invest, it might be anywhere from 2 to 5 years to get the required experience and expertise. It's not something you'll learn overnight.

[livehybrid]

Hi @Skyion 

The fact that they are looking for a senior (sr) SIEM consultant indiciates that they are looking for someone who already has experience in this field. As a SIEM consultant you will need further skills than just Splunk, do you already have some security background/training/experience?

In terms of getting started with Splunk, I would suggest starting with a tutorial at https://www.splunk.com/en_us/blog/learn/splunk-tutorials.html and also look at the free training at https://www.splunk.com/en_us/training/free-courses/overview.html

Once you have done these you can start to look at the Enterprise Security Admin training track at https://www.splunk.com/en_us/training/course-catalog.html?sort=Newest&filters=filterGroup2SplunkEnte...

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful
• Marking it as the solution if it resolved your issue
• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing