Expertise in SIEM (Security Identity and Event Management) tools such as Splunk
Transition management of Security Operations Center (SOC) from currentset up to the proposed new state (and define its roadmap, transition plan, actionable, responsibilities and project schedule)
Strong knowledge of Splunk search processing language (SPL) and experience in optimizing complex search queries.
Splunk certifications (e.g., Splunk Certified Architect, Splunk Certified Admin) are a plus.