splunk consultant

Nets-international Communication

<p><b>Overview</b><br/>We are seeking a skilled <b>Splunk Engineer</b> with strong <b>administration and operational</b> experience to design, implement, and maintain Splunk infrastructure and analytics solutions. The ideal candidate will have hands-on expertise in <b>Splunk Enterprise / Enterprise Security (ES)</b>, <b>data onboarding</b>, <b>dashboard creation</b>, <b>alert tuning</b>, and <b>system administration</b>.<br/>This role bridges <b>engineering</b>, <b>operations</b>, and <b>security analytics</b>, ensuring Splunk runs optimally while delivering actionable insights.</p><p><b>Key Responsibilities</b></p><ul><li>Design, deploy, and maintain <b>Splunk environments</b> (indexers, search heads, forwarders, deployment servers, cluster masters).</li><li>Create and optimize <b>SPL queries</b>, <b>dashboards</b>, <b>reports</b>, and <b>alerts</b> for operational visibility and threat detection.</li><li>Develop and automate <b>data onboarding</b> pipelines from diverse sources (syslog, cloud, API, EDR tools).</li><li>Integrate Splunk with <b>SIEM/SOAR platforms</b>, <b>cloud services (AWS, Azure, GCP)</b>, and <b>endpoint security tools</b>.</li><li>Support <b>use case development</b> for security monitoring and compliance (SOC, IT Ops, or DevOps).</li><li>Perform <b>installation, configuration, and upgrade</b> of Splunk components.</li><li>Manage <b>user roles, authentication, and access control (RBAC)</b>.</li><li>Monitor <b>system health</b>, <b>indexing performance</b>, and <b>data retention</b> policies.</li><li>Handle <b>license management</b>, <b>data optimization</b>, and <b>troubleshooting</b>.</li><li>Conduct <b>backup, recovery</b>, and <b>disaster recovery</b> planning for Splunk infrastructure.</li></ul><p><b>Security &amp; Operations</b></p><ul><li>Collaborate with <b>SOC Analysts</b> to build and tune correlation searches.</li><li>Ensure <b>data integrity, confidentiality, and compliance</b> with security standards (SOC 2, ISO 27001, NIST).</li><li>Participate in <b>incident response</b> and <b>threat analysis</b> leveraging Splunk dashboards.</li><li>Automate repetitive tasks using <b>scripts (Python, Bash, PowerShell)</b> and <b>APIs</b>.</li></ul><p><b>Required Skills &amp; Qualifications</b></p><ul><li>Bachelor&rsquo;s degree in <b>Computer Science</b>, <b>Information Security</b>, or related field.</li><li><b>3+ years</b> of experience in <b>Splunk engineering or administration</b>.</li><li>Proficiency in <b>Splunk Enterprise / ES</b>, <b>SPL scripting</b>, and <b>data onboarding</b>.</li><li>Experience managing <b>Splunk clusters</b>, <b>indexing</b>, and <b>search head configurations</b>.</li><li>Strong understanding of <b>log parsing, data normalization</b>, and <b>regex extractions</b>.</li><li>Familiarity with <b>Linux/Windows administration</b> and <b>network security concepts</b>.</li><li>Experience with <b>security frameworks</b> (NIST, MITRE ATT&amp;CK, SOC2, PCI-DSS).</li><li>Scripting skills in <b>Python</b>, <b>Shell</b>, or <b>PowerShell</b>.</li><li>Excellent problem-solving and analytical skills.</li></ul><p><b>Preferred Qualifications</b></p><ul><li>Splunk Certifications:</li><li><i>Splunk Core Certified Power User</i></li><li><i>Splunk Enterprise Certified Admin</i></li><li><i>Splunk Enterprise Security Certified Admin</i></li><li>Knowledge of <b>cloud-based Splunk (Splunk Cloud, AWS, Azure integrations)</b>.</li><li>Experience working in a <b>Security Operations Center (SOC)</b> environment.</li></ul><p>Job Type: Full-time</p><p>Ability to commute/relocate:</p><ul><li>Muscat: Reliably commute or planning to relocate before starting work (Required)</li></ul><p>Application Question(s):</p><ul><li>what is your monthly current salary?</li><li>what is your monthly expected salary?</li><li>what is your notice period?</li></ul><p>Education:</p><ul><li>Bachelor's (Required)</li></ul><p>Experience:</p><ul><li>Splunk Engineer: 4 years (Required)</li></ul>

Splunk Engineer

Tata Consultancy Services (TCS)

<div></div><div><div><div><div><ul><li><div>Splunk ITSI is must with 3+ years of hands-on experience with &ldquo;Splunk Admin Certification.&rdquo;
</div></li><li><div>Create a deployment strategy &amp; Deploying Splunk to new environment.
</div></li><li><div>Managing Configuration effectively and Splunk Core &amp; ITSI Upgrade
</div></li><li><div>Excellent in writing SPL, defining KPIs &amp; ITSI services to monitor the infrastructure.
</div></li><li><div>Good in SNOW integration for ticketing &amp; Event Management
</div></li><li><div>Onboard new data feeds translating Splunk based use cases to data objects required from source system (servers, databases, networking devices etc.)
</div></li><li><div>Good knowledge of IDX Cluster/SHC &amp; other Splunk components from Installation to management.
</div></li><li><div>Knowledge of syslog, Splunk SDK, Splunk builder, API &amp; Service Now
</div></li><li><div>Excellent in building Dashboards, setting up an alert &amp; reports.
</div></li><li><div>Linux admin Knowledge
</div></li></ul></div></div></div><div><div><div><b>Location</b></div>
<div>Hyderabad</div>
</div><div><div><b>Job Function</b></div>
<div>IT INFRASTRUCTURE SERVICES</div>
</div><div><div><b>Role</b></div>
<div>Specialist</div>
</div><div><div><b>Job Id</b></div>
<div>376903</div>
</div><div><div><b>Desired Skills</b></div>
<div>Azure | Splunk</div>
</div></div><p>Desired Candidate Profile
</p><div><div><b>Qualifications</b> : BACHELOR OF ENGINEERING</div></div></div><div></div>

Booz Allen Hamilton

<div>Splunk Architect and SOC Solutions Engineer, Lead<p><b>
Key Role:</b></p><p>
Support our various government clients. Lead engagements focused on assessment, architecture, and deployment of enterprise-scale Splunk solutions, including operational development and providing oversight for a Splunk log management infrastructure. Help manage Splunk, an equivalent hardware infrastructure, and oversee production support. Provide architecture-level design to support and operate Splunk using Security Information and Event Management (SIEM) or Security Event Management (SEM) best practices and Splunk enterprise security. Manage customer expectations, help onboard data into Splunk, support projects in multi-site or clustered Splunk installations, and assist with the development of advanced KPIs and metrics to meet the requirements of key stakeholders. Conduct research in areas driven by customer use cases, architect and support systems used to configure and deploy solutions. Assist with the automation, deployment, integration, and testing of enterprise systems and services and create and optimize Big Data correlations as a Splunk search language (SPL) expert.
</p><p></p><p><b>Basic Qualifications:</b></p><ul><li><p>
3+ years of experience with Splunk administration and architecture, including Splunk components, such as Splunk Enterprise Security (ES) and Splunk User and Entity Behavior Analytics (UEBA)</p></li><li><p>
3+ years of experience with Splunk development and Splunk components such as indexer, search head, forwarder, or deployment server</p></li><li><p>
5+ years of experience in IT infrastructure, networking, architecture, administration, or security</p></li><li><p>
Experience with customer interaction and data onboarding, configuration, and optimization in Splunk</p></li><li><p>
Knowledge of security operations service capabilities, including monitoring, detection, and analysis, incident response, solutions architecture, engineering, and tool deployment, integration, and support</p></li><li><p>
Public Trust</p></li><li><p>
Bachelor&rsquo;s degree in Computer Science, Information Systems, Information Assurance, Engineering, or Business</p></li></ul><p></p><p><b>
Additional Qualifications:</b></p><ul><li><p>
Experience working in a fast-paced, security operations center, promptly responding to critical mission needs as needed</p></li><li><p>
Experience with contributing to technical proposal responses and technical white papers</p></li><li><p>
Experience with Linux shell scripting, Python, and Regex</p></li><li><p>
Experience with security tools, including Firewall, IDS, Active Directory, Nmap, Burp, Proxy, Bro, or Endpoint technologies</p></li><li><p>
Knowledge of networking protocols</p></li><li><p>
Knowledge of the integration of threat intelligence, threat hunt, forensics, and malware analysis into security operations</p></li><li><p>
Ability to communicate with management and other technical subject matter experts and operators</p></li><li><p>
Splunk Certified Architect, Splunk Enterprise Security Certified Admin, or Comp TIA CISSP Certification</p></li></ul><p></p><p><b><br>
Vetting:</b></p><p>
Applicants selected will be subject to a government investigation and may need to meet eligibility requirements of the U.S. government client; Public Trust determination is required.</p><p></p><p><b>
Compensation</b></p><p>
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.</p><p></p>
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $112,800.00 to $257,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.<p></p><p><b>
Identity Statement</b></p><p>
As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.</p><p></p><p><b>
Work Model</b><br>
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.</p><ul><li>
If this position is listed as remote or hybrid, you&rsquo;ll periodically work from a Booz Allen or client site facility.</li><li>
If this position is listed as onsite, you&rsquo;ll work with colleagues and clients in person, as needed for the specific role.</li></ul><p></p><p><b>
Commitment to Non-Discrimination</b></p><p>
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</p></div><p></p>

Splunk Architect and SOC Solutions Engineer, Lead

<div></div><div><div><div><p>Job Role: Splunk Observability Developer<br>
Experience Range: 6 to 10 years<br>
Location: Hyderabad, Bangalore, Chennai, Gurgaon, Pan India<br>
Job Description
Splunk Observability APM(application Performance Monitoring)<br>
 SignalFX query language<br>
OpenTelemetry<br>
Cloud Native Technologies: Familiarity with cloud native technologies like kubernetes, Docker and serverless computing, Cloudfunction<br>
Understanding of Observability Skills - metrics, logs, trace<br>
Log and Trace analysis, creation of detectors in splunk observability tool<br>
</p></div></div><div><div><div><b>Location</b></div>
<div>Hyderabad</div>
</div><div><div><b>Job Function</b></div>
<div>IT INFRASTRUCTURE SERVICES</div>
</div><div><div><b>Role</b></div>
<div>Developer</div>
</div><div><div><b>Job Id</b></div>
<div>377109</div>
</div><div><div><b>Desired Skills</b></div>
<div>Splunk</div>
</div></div><p>Desired Candidate Profile
</p><div><div><b>Qualifications</b> : Undergraduate</div></div></div><div></div>

Splunk Observability

<div></div><div><div><div><div><ul><div>9 - 12 Years</div>
<div></div><div>1 Opening</div>
 <div>Hyderabad</div></ul></div><p></p><div><br>
<div><div>
</div></div></div></div><div></div><div><h3 class="jobSectionHeader"><b>Role description</b></h3>
<div><p>Role Proficiency:</p>
<p>
Take the lead in monitoring and maintenance across a global customer base for respective SIEM or EDR technology taking ownership of issues through and including resolution.</p>
<p>
Outcomes:</p>
<div>
<ul><li>Monitor investigate and provide meaningful resolution for tickets and issues across multiple customers for the specified SIEM or EDR type. Escalate accordingly issues observed to a team member if appropriate to ensure optimal performance of the platform supported.</li></ul>
<ul><li>Contribute to the evolution of the wider teams capabilities to help deliver CyberProof&rsquo;s strategic vision for a global managed SIEM services.</li></ul>
<ul><li>Build strong relationships with customers and key stakeholders to ensure customer requirements and needs are fulfilled.</li></ul>
<ul><li>Take ownership of personal workload acting as a role model for peers. Continuously seek to improve the service offered to global customers.</li></ul>
<ul><li>A Subject Matter Expert for the respective technology being worked on both internally within CyberProof and for managed clients providing input for key in- life services within CyberProof.</li></ul>
<ul><li>Assist with service and change requests for platform types such as access requests as well as more targeted requests for specific modules on platform such as dashboard creation query support Investigation of more complex issues.</li></ul>
<ul><li>Proactively develop and maintain documentation and knowledge articles for wider members of the team relating to customers supported.</li></ul>
<ul><li>Ensure in-life requests are being actioned in a timely manner for self and junior roles.</li></ul>
<ul><li>Provide assistance and mentorship for global team members both within and outside the</li></ul>
</div>
<p></p><p>Measures of Outcomes:</p>
<div>
<ul><li>Percent of Adherence to processes and methodologiesa.Percent of adherence to SLA's for in- life ticketing processesb.Percent of adherence to workflows and completeness of audit trail for all activities undertaken.</li></ul>
<ul><li>Productivity score maintaineda.Number of issues with early identification in case of problems with delivering tasks or workload.b.Number of issues with effective evidence provided for escalations during triage.</li></ul>
<ul><li>Number of identified opportunities implemented to enhance change and process documentation to ensure remain relevant for broader team.</li></ul>
<ul><li>Number: of relevant skill related training and development activities undertaken; evidenced by certification.</li></ul>
</div>
<p></p><p>Outputs Expected:</p>
<p>
Technical Expertise:</p>
<div>
<ul><li>Show strong comprehension and experience with the specific SIEM or EDR platform that Specialist is working on.</li></ul>
<ul><li>Take the lead on identifying issues with the specified platform type or its supporting infrastructure.</li></ul>
<ul><li>Using technology identify and implement technical solutions to issues with queries/rules/dashboards/data feeds</li></ul></div><br>
<p><br>
Platform Management &ndash; Incidents and Requests:</p>
<div>
<ul><li>Provide accurate updates to appropriate Service and Change Requests; ensuring an audit trail is preserved and SLAs are achieved.</li></ul>
<ul><li>Proactive identification of issues<br>
with behavioural analysis/patterns identified<br>
with suggestions and plans for achieving resolution.</li></ul>
<ul><li>Provide leadership and support to Junior members.</li></ul></div><br>
<p><br>
Stakeholder Focus:</p>
<div>
<ul><li>Comfortable and aware of the customers supported<br>
Capable of providing support towards QBR preparation and delivery as required.</li></ul>
<ul><li>Ensure relevant reporting metrics of customer information provided in a timely manner. Engage with customer/TAM/Project team where required.</li></ul>
<ul><li>Ensure customer specific processes are being followed.</li></ul>
<ul><li>Undertake mandatory and proactive learning and development opportunities.</li></ul>
</div>
<p></p><p>Skill Examples:</p>
<div>
<ul><li>Excellent communication skills with both internal and external stakeholders</li></ul>
<ul><li>Ability to be prepared to undertake background check/validation to ensure integrity.</li></ul>
<ul><li>Ability to work unsupervised with the assigned SIEM or EDR technologies and their supporting infrastructure</li></ul>
<ul><li>Aptitude in identification objectives and priorities for the broader team; identifying successes/failings</li></ul>
<ul><li>Capacity in working with multiple querying languages with the ability to have a full end- to- end set of skills from onboarding and parsing a log source to exploiting via analytics or rulesets.</li></ul>
<ul><li>Ability to have sufficient experience and confidence in target toolset to be able to provide mentoring to upskill junior members.</li></ul>
<ul><li>Capable of showing strong analytical skills working across multiple technologies and customers as well as sufficient competence to draft support documentation for internal or external use.</li></ul>
</div>
<p></p><p>Knowledge Examples:</p>
<div>
<ul><li>Experience in working with Security Operations and/or EDR/SIEM Platform Management roles.</li></ul>
<ul><li>An understanding of various Security Frameworks and Security controls with a focus on IT.</li></ul>
<ul><li>Multiple years of experience working as part of a MSSP style environment working with different customer types</li></ul>
<ul><li>Detailed knowledge of specific SIEM or EDR technology as well as how the capability can be utilised to support operations.</li></ul>
<ul><li>Experience and knowledge of how to utilise Big Data and Data manipulation.</li></ul>
<ul><li>Desirable: Certifications in IT infrastructure / SIEM / EDR / Ethical Hacking</li></ul>
<ul><li>Desirable: Academic qualifications and/or relevant work experience in lieu of qualifications.</li></ul>
</div>
<p></p><p>Additional Comments:</p>
<p>
SIEM Platform Administration</p>
<ul>
<li>Deploy, configure, and maintain Splunk environments.</li>
<li>Manage data ingestion pipelines, connectors, and log sources across hybrid and multi-cloud environments.</li>
<li>Monitor system health, performance, upgrades and capacity planning for SIEM platforms.</li>
<li>Implement and maintain role-based access controls (RBAC) and ensure compliance with security policies.</li>
<li>Develop and maintain automation scripts for operational efficiency.</li>
<li>Support the development and deployment of custom parsers, dashboards, and reports.</li>
<li>Troubleshoot and resolve issues related to system uptime and availability, data ingestion, parsing, and correlation.</li>
<li>Administer and optimize Cribl environments including Stream, Search, and Lake.</li>
<li>Design and implement enterprise deployments with worker groups, routes, sources, and destinations.</li>
<li>Develop and maintain advanced pipelines for data parsing, enrichment, and routing.</li>
<li>Collaborate with stakeholders to gather requirements and deliver tailored observability solutions.</li>
<li>Integrate Cribl with platforms like Splunk</li>
</ul>
<p>Required Qualifications &amp; Experience:</p>
<ul>
<li>5+ years of experience in IT/Security operations with at least 3 years in SIEM administration and Cribil data ingestion pipelines.</li>
<li>Proven hands-on experience with Splunk Enterprise/Splunk Cloud and Cribil.</li>
<li>Strong knowledge of log management, data normalization, and security event correlation.</li>
<li>Experience with scripting languages (SPL).</li>
<li>Familiarity with cloud platforms and hybrid environments.</li>
<li>Understanding of security frameworks (MITRE ATT&amp;CK, NIST, ISO 27001).</li>
<li>Proven experience with Cribl Stream, Search, and Lake.</li>
<li>Experience with Linux, Python, Regex, and JavaScript ________________________________________</li>
</ul>
<p>Preferred Skills:</p>
<ul>
<li>Experience with SIEM platforms (e.g. Splunk (SPL)) and Cribil.</li>
<li>Certifications such as Splunk Certified Admin or Splunk Certified Architect</li>
<li>Cribl certifications preferred: CCOE User/Admin, Cribl Certified Engineer</li>
<li>Exposure to compliance standards like GDPR, HIPAA, PCI-DSS.</li>
<li>Strong analytical, communication, and documentation skills.</li>
</ul></div>
<h3 class="jobSectionHeader"><b>Skills</b></h3>
<div><p>Splunk,Cribl,Cyber Security,Platform Admin,Platforms</p></div></div></div></div><p></p>
<br><div><h3 class="jobSectionHeader"><b>About UST</b></h3>
<div>UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world&rsquo;s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients&rsquo; organizations. With over 30,000 employees in 30 countries, UST builds for boundless impact&mdash;touching billions of lives in the process.</div></div>

Splunk/SIEM Admin (Cribl)

help AG

<div><p>Help AG is looking for a talented and experience Senior Security Engineer who will be responsible for the creation of procedures, implementation of process development, and maintenance of security systems across internal and client environments. The Security Engineer will work closely with Management, Senior Engineers, Threat Analysts, Solution Architects, other Security Engineers, and clients to complete high profile, critical services to existing Managed Security Service clients.</p><p>
The Senior Security Engineer will be responsible for the administration, maintenance, and integration of Splunk, Cribl, Azure Sentinel, EDR platforms for security operations technical analysis, assessment, and recommendations in the areas of real-time security, operational network &amp; identity management system, and applications systems security monitoring.</p><p></p><p><b><br>
Responsibilities</b></p><p></p><ul><li><p>
Administering Splunk and Splunk Apps to include developing new or extending existing Apps to perform specialized functionality. Integrating Splunk with a wide variety of legacy data sources.</p></li><li><p>
Engaging application and infrastructure teams to establish best practices for utilizing Splunk data and visualizations.</p></li><li><p>
Design, implement, and support solutions with Microsoft security technologies such as Azure Cloud Access Security Broker, Office 365</p></li><li><p>
Advanced Threat Protection (O365 ATP), Microsoft Defender ATP, and their integrations used to deliver internet-scale intelligence and managed security products.</p></li><li><p>
Implement &amp; administer Microsoft Defender (ATP), Azure Cloud Access Security Broker &amp; Azure Threat Protection security products within customer environment Manage and oversee day-to-day activities of Azure IP platform and ensure adherence to enterprise standards in project execution methodology, requirements gathering, quality assurance, and continuous improvement.</p></li><li><p>
Handle the implementation/deployment/support of Nessus scan engines and Tenable Security Center and peripherals with Engineering, SOC, TIU, and IR.</p></li><li><p>
Maintain local and network credentials, Tenable Security Center, and provisions access to vulnerability scanning systems.</p></li><li><p>
Integrate Nessus/TSC with other security and IT systems management tools.</p></li><li><p>
Document vulnerabilities and work on vulnerability mitigation with agreed SLA.</p></li><li><p>
Managing CB sensors including deployment, operation, management, maintenance, update, upgrade, patching, and administration.</p></li><li><p>
Should be able to create watchlists to detect indicators of compromise (IOCs) and malicious behavior of new threats.</p></li><li><p>
Hands on in writing queries in CB to search the desired events.</p></li><li><p>
Assess customer needs and expectations, design solutions to meet those needs, and then implement the design.</p></li><li><p>
Quickly build and solve a problem using a new technology to determine viability.</p></li><li><p>
Serve as a primary responder for Managed Security customer systems, taking ownership of client configuration issues and tracking through resolution.</p></li></ul><p></p><p><b>
Qualifications &amp; Skills</b></p><p></p><ul><li><p>
College degree or equivalent training with experience working in a Security Operations Center, Managed Security, or client network environment.</p></li><li><p>
Minimum 7 years of professional experience supporting and maintaining SPLUNK SIEM System.</p></li><li><p>
5-6 years of experience with advanced tuning of Splunk SIEM content.</p></li><li><p>
Experience in Cribl.
</p></li><li><p>Professional experience working with networks and network architecture.</p></li><li><p>
Information security knowledge in one or more areas such as EDR &ndash; Enterprise end-point security products (e.g., McAfee e-Policy Orchestrator, Virus Scan, Anti-Spyware, Host Data Loss Protection, Endpoint Encryption, etc.)</p></li><li><p>
Practical hands-on experience in EDR (Carbon Black), Vectra, and Microsoft Azure.</p></li><li><p>
Splunk, Azure Log analytics, or equivalent big data engine experience.</p></li><li><p>
Experience with MS Azure Information Protection and technologies, including solution architecture, deployment, management, and support in a large global enterprise.</p></li><li><p>
General security knowledge, certificates on Splunk Admin, Splunk Architect, Splunk Consultant is a must. Also, good to have is Azure, Managed vulnerability (Nessus/Tenable), EDR (Carbon Black) and Firewall related security certifications.</p></li><li><p>
Knowledge of Linux and Windows Operating Systems.</p></li><li><p>
Experience with various other SIEM security products such as: Splunk, ArcSight, Nitro, or LogRhythm and infrastructure components such as proxies, firewalls, IDS/IPS, and DLP.</p></li><li><p>
Experience working with clients in a service delivery function.</p></li><li><p>
Shift flexibility, including the ability to provide after-hours support when needed.</p></li><li><p>
Experience working with internal and client ticketing and knowledge base systems for Incident and Problem tracking as well as procedures.</p></li></ul></div><p></p>

Senior Security Engineer - Splunk, Cribl & Azure Sentinel

Deloitte

<div>
 <strong>
  Summary
  <br/>
  <br/>
 </strong>
 <strong>
  Position Summary
  <br/>
  <br/>
 </strong>
 <strong>
  Artificial Intelligence &amp; Engineering
  <br/>
  <br/>
 </strong>
 AI &amp; Engineering leverages cutting-edge engineering capabilities to help build, deploy, and operate integrated/verticalized sector solutions in software, data, AI, network, and hybrid cloud infrastructure. These solutions insights are powered by engineering for business advantage, helping transforming mission-critical operations.
 <br/>
 <br/>
 Join our AI &amp; Engineering team to help in transforming technology platforms, driving innovation, and helping help make a significant impact on our clients' success achievements. You&rsquo;ll work alongside talented professionals reimagining and re-engineering operations and processes that are could be critical to businesses.
 <br/>
 <br/>
 <strong>
  Position Summary
  <br/>
  <br/>
 </strong>
 <strong>
  Level:
 </strong>
 Consultant
 <br/>
 <br/>
 As an experienced Consultant at Deloitte Consulting, you will be responsible for individually delivering high quality work products within due timelines. Need-basis you will be mentoring and/or directing junior team members/liaising with onsite/offshore teams to understand the functional requirements.
 <br/>
 <br/>
 <strong>
  Work you&rsquo;ll do:
  <br/>
  <br/>
 </strong>
 Apply industry knowledge to requirements gathering and analysis, ensuring alignment with sector needs. Demonstrate expertise across the entire software development lifecycle, from design and coding to deployment and defect resolution, collaborating with stakeholders for effective delivery. Conduct peer and team reviews to maintain quality standards. Actively engage in Agile practices, including sprint planning, retrospectives, and effort estimation. Build and share business process knowledge, supporting project knowledge management and team training. Proactively recommend process improvements, track efficiency gains, and contribute to automation and innovation, all aimed at enhancing project outcomes and delivering greater value to clients.
 <br/>
 <br/>
 <strong>
  The team:
  <br/>
  <br/>
 </strong>
 AI &amp; Data offers a full spectrum of solutions for designing, developing, and operating cutting-edge Data and AI platforms, products, insights, and services. Our offering helps clients innovate, and enhance their data, AI, and analytics capabilities, ensuring they can mature and scale effectively.
 <br/>
 <br/>
 AI &amp; Data professionals will work with our clients to:
 <br/>
 <br/>
 <ul>
  <li>
   Design and modernize large-scale data and analytics platforms including data management, governance and the integration of structured and unstructured data to generate insights leveraging cloud, edge and AI/ML technologies, platforms and methodologies for storage, processing
  </li>
  <li>
   Leverage automation, cognitive and AI based solutions to manage data, predict scenarios and prescribe actions
  </li>
  <li>
   Drive operational efficiency by managing and upgrading their data ecosystems and application platforms, utilizing analytics expertise and providing As-a-Service models to ensure continuous insights and enhancements.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <strong>
  Must Have Skills/Project Experience/Certifications:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   3-6 years of hands-on experience in data engineering with a proven track record in using Databricks on Azure showing successful project delivery.
  </li>
  <li>
   Strong working knowledge is essential; Scala is beneficial but optional.
  </li>
  <li>
   Solid understanding of these big data technologies and concepts.
  </li>
  <li>
   Ability to create frameworks for data ingestion and quality validation using PySpark.
  </li>
  <li>
   Experience constructing data pipelines using these Databricks features.
  </li>
  <li>
   Proven expertise in tuning Databricks/Spark jobs for better resource usage and faster processing.
  </li>
  <li>
   Demonstrated teamwork, analytical, and troubleshooting abilities.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Good to Have Skills/Project Experience/Certifications:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experience with cloud databases, ADLS Gen2, Key Vault, Cosmos DB, Data Factory, Synapse.
  </li>
  <li>
   Familiarity with data warehouses/marts, data lakes, 3NF, and dimensional modeling.
  </li>
  <li>
   Hands-on experience with Databricks Unity Catalog (including fine-grained access control).
  </li>
  <li>
   Experience with Apache Airflow for orchestration.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Education:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   BE/B.Tech/M.C.A./M.Sc (CS) degree or equivalent from accredited university
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Location:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bengaluru/Hyderabad/Pune/Chennai/Kolkata
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Our purpose
  <br/>
  <br/>
 </strong>
 Deloitte&rsquo;s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities.
 <br/>
 <br/>
 <strong>
  Our people and culture
  <br/>
  <br/>
 </strong>
 Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ideas and perspectives, and bring more creativity and innovation to help solve our clients' most complex challenges. This makes Deloitte one of the most rewarding places to work.
 <br/>
 <br/>
 <strong>
  Professional development
  <br/>
  <br/>
 </strong>
 At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state-of-the-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people. Explore DU: The Leadership Center in India .
 <br/>
 <br/>
 <strong>
  Benefits To Help You Thrive
  <br/>
  <br/>
 </strong>
 At Deloitte, we know that great people make a great organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financially&mdash;and live their purpose. To support our professionals and their loved ones, we offer a broad range of benefits. Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you.
 <br/>
 <br/>
 <strong>
  Recruiting tips
  <br/>
  <br/>
 </strong>
 From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.
 <br/>
 <br/>
 Requisition code: 300093
</div>


Consultant-Databricks

Search 3224+ Splunk consultant jobs near you this November. New roles added regularly across leading industries. Apply today.

3224 splunk consultant jobs NEAR_ME

Splunk Engineer

Splunk Engineer

Splunk Architect and SOC Solutions Engineer, Lead

Splunk Observability

Splunk/SIEM Admin (Cribl)

Senior Security Engineer - Splunk, Cribl & Azure Sentinel

Consultant-Databricks