Description

You will design, deploy, and manage scalable Splunk SIEM architectures and backend operations.

Responsibilities

• Design and implement scalable SIEM architectures, including backend operations for UF, HF, SH, and Indexer Clusters.
• Manage log collection, parsing, normalization, and retention strategies.
• Optimize logs and license usage through effective filtering and re-routing of security and non-security logs.
• Integrate Splunk logging infrastructure with third-party observability tools.
• Produce technical documentation including HLD, LLD, implementation guides, and operation manuals.

Required Skills

• 10+ years of experience with Splunk backend architecture and operations.
• Expertise in Splunk SIEM, log management, and license optimization.
• Strong Linux Administration skills.
• Proficiency in scripting with Python, PowerShell, or Bash for task automation.
• Deep understanding of Network Architecture and its impact on logging components.
• Working knowledge of Syslog and data parsing techniques.
• Experience with data parsimony concepts and security standards.
• Degree in any graduate field.

Preferred Skills

• Experience with open source or third-party observability tools like ELK or DataDog.

Key Skills

Education

Any Gradute