Splunk Administrator

Company Description

Natixis in Portugal belongs to Global Financial Services business unit, the global arm of Groupe BPCE. As the second largest banking group in France, Groupe BPCE pursues a full range of banking and insurance activities, counting 100.000 employees and serving 36 million customers worldwide.

Based in Porto, Natixis Center of Expertise mission is to transform traditional banking by developing innovative solutions for the bank’s business, operations and work culture worldwide, as a key driver of the company’s culture of agility and innovation: a perfect fit in Portuguese labour culture. Teams of IT, Banking Support Activities and Compliance work in an integrated, inclusive and transversal way, supporting all the business lines and country platforms.

Natixis in Portugal is the best combination of a “start-up mindset”, given its multicultural and inclusive environment, culture of proximity and participation and dynamic working methodologies, based on agility, collaboration and creativity, with a large, solid structure, founded on career management, including international mobility, financial security and robust processes, along with unlimited learning opportunities: small enough to keep entrepreneurial spirit, big enough to deliver globally.

Join a team where you can make things change, achieve limitless perspectives to evolve and grow, become an expert and reach your full potential Because you deserve much more than a job.

**Job Description**:
Founded in 2015, **BPCE Infogérance & Technologies** is a subsidiary of Groupe BPCE, dedicated to **Infrastructures**, **End-User Environment**, **Security** and **Production**. Driven by **growth**, **expertise**, **transformation** and **agility**, this project embraces an international mindset and a diverse skill set. You’ll find yourself in a **dynamic and enriching workplace** or, as we like to name it, a real **tech playground**, where you’ll be able to explore a huge tech stack.

**Team presentation**:
The SOC means Security Operation Center. Its main goal is to prevent, detect and respond to Cybersecurity Events.

The OTP Team is a part of the SOC Department. It means “Tools, Transformation & Projects”. Our main goal is to Support and Improve the Security Tools on our SOC activities**_._**

**OTP Team handles**:

- Our Security Information & Event Management tool: Splunk
- Our Security Incident and Response Plateform tool: TheHive
- Our Security Orchestration & Automation Response tool: n8n
- Our Endpoint Detection and Response tool: Trellix HX
- It has also the responsibility to maintain a PRIS environment which is a secure environment outside of the BPCE Group’s Information System that allows our experts to investigate and proceed with forensic work.

**And the OTP Team leads also the following security projects**:

- Security Log collection
- Security usecases with Machine Learning and Deep learning
- Cloud Security log collection and usecases (AWS, GCP and Azure)
- Usecases with Security Automation

**Missions**:

- Ensure the availability of technical resources
- Analyze and correct incidents in levels 2 and 3
- Actively participate in the production and software development processes in conjunction with Operators Editors and provide operational support to project teams
- Implement technical resolution solutions of incidents. Perform diagnostics to identify causes of malfunction, propose and implement "back-up" fixes and solutions.
- Analyze the operational risks and customer impacts of its area of responsibility
- Ensure the management of environments (definition of needs, validation of development and acceptance environments, monitoring)
- Ensure a role of advice, assistance, information, training and early warning in integration (definition of the components of the IS, steering of implementation and guaranteeing the required level of quality).
- Participate in defining usability requirements in their area of responsibility and, where necessary, interface experts in other areas and manage interactions with suppliers.
- Contribute to reliability, securing and optimising security in its area of responsibility
- Offering innovative solutions to improve the performance of its area of activity
- Ensuring the right level of service quality in line with the requirements of service contracts (SLA) in their area of responsibility

**Specificities for integration activities**
- Participate in the design and/or choice of solutions (or software package)
- Participate in the production of information system evolutions
- Establish operational preparation files, manufacture or evolve components, test them individually and ensure that the results comply with the technical specifications
- Integrate the solution or the hardware and/or corrective maintenance into the reference system and ensure the availability of the components
- Actively participate in the certification

**In addition, for the Packaging activities**
- Install a s