Description

What's the Job? 

• Provide cybersecurity production support for IAM and Splunk platforms in a highly regulated financial services environment, ensuring business continuity and SLA performance.
• Monitor security and operational signals, respond to incidents, triage issues, coordinate service restoral, and drive problem engagement to identify root cause and facilitate permanent fixes.
• Manage, configure, and optimize SIEM/SOAR capabilities with a primary focus on Splunk, including searches, dashboards, alerts, and automation playbooks.
• Collaborate with IT teams to build detection rules, automation playbooks, and dashboards that strengthen security posture in a fast-paced FinTech setting.
• Support 24x7 operational needs, including on-call coverage and off-hours work as required, while complying with bank regulatory and security policies and audit requirements.

What's Needed?

• 5+ years of hands-on experience in SIEM/SOAR administration and security operations, with strong Splunk expertise (searches, dashboards, alerts, playbooks) and advanced threat detection support.
• 5+ years of hands-on experience in IAM (Identity and Access Management), including expert-level knowledge of access management and entitlement technologies, plus MFA expertise.
• Expert-level troubleshooting and production support skills across Windows OS and RedHat Linux, including strong Linux troubleshooting and the ability to work with OpenShift containers.
• Solid knowledge of SQL and Oracle (and other database flavors), plus experience with scripting and automation using PowerShell/Unix scripting, Ansible, and related operational tooling.
• Experience with incident management, problem management, change/release management, root cause analysis, and ITIL-aligned practices; strong communication skills to explain issues, impact, and remediation clearly

Key Skills

Education

Any Graduate