Log Parsing Consultant
Apply NowCompany: Spruce Infotech
Location: Winnipeg, MB R2C 5M8
Description:
Job Title- Log Parsing Consultant
Location - Winnipeg ,Manitoba- Remote is fine
Duration - 1+year
Resource that has a development/Linux background including the following skills:
Location - Winnipeg ,Manitoba- Remote is fine
Duration - 1+year
Resource that has a development/Linux background including the following skills:
- Experience with regular expressions (PCRE), and development of filtering rules such as GROK rules.
- Prior experience supporting logging platforms with log transformation requirements (eg. The ELK Stack, Wazuh, OSSEC, or Fluentd).
- Fluentd configuration experience is required (this should be extensive fluentd experience in order to minimize the chance of outages).
- Exposure to SIGMA files, and writing/enriching event translations.
- Programming experience in Ruby or similar language is an asset. This will significantly help when explaining how fluentd works.
- SOC experience is an asset. This will help the individual understand what to filter or transform.
- Certifications such as ECIH, or OSCP are a definite asset (but not required).