Splunk Engineer

Job Description Position Summary Senior Analyst - Splunk Engineer - Deloitte Cyber Defense India Private Limited Deloitte Global is the engine of the Deloitte network.Our professionals reach across disciplines and borders to develop and lead global initiatives.We deliver strategic programs and services that unite our organization. Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in what is but rather what can be to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived. Want to make an impact that matters Consider Deloitte Global. Qualifications - Bachelor's degree in Computer Science or Business Administration, or relevant educational or professional experience. - 6 years of related experience including 4 to 5 years in Splunk Administration. - Strong Working Knowledge of the Splunk and Cribl Platform. - Ability to troubleshoot performance and issues, as well as installation and Splunk upgrades - Strong experience in analyzing, troubleshooting and providing solutions for technical issues. - Experience with Splunk Enterprise Security. - Experience in Syslog, Splunk HTTP Event collection (HEC). - Experience in ingesting logs from DB Connect app. - Creating Alerts, Dashboards and reports in Splunk Tool. Writing Scripts and configure in Splunk Servers. - Experience with Splunk integration to AWS, Azure, and GCP. - Knowledge and experience in GIT. - Experience in requirement gathering and documentation. - Experience in Log parsing, lookups, calculated fields extractions using regular expression(regex). - Hands-on Experience in Cribl - Sound judgment skills and ability to manage escalations. - Determines methods and procedures on new assignments with minimal instruction, - Excellent interpersonal and organizational skills. Work shift Timings : 11 AM to 8 PM Location: Hyderabad, India or Bangalore, India or Pune, India Roles & Responsibilities - Provide proficient knowledge of recognizing and onboarding new data sources into Splunk, analyzing the data for parsing purposes to make it CIM compliant. - Provide skillful knowledge on Cribl as we are heavily working on Cribl for data ingestion. - Work with other Cybersecurity Engineering team members and will be required to interact with end users to gather requirements, perform troubleshooting, and aid with the creation of Splunk search queries and dashboards as required. - Will be required interact with senior management, as necessary. - Troubleshoot performance alerts from the Splunk infrastructure or Splunk agents - Assist in the testing of vendor patches for all security applications the Engineering team operational support. - Maintain the Cybersecurity Engineering group in ServiceNow and ensure all request and incident SLA's as met as required by our stakeholders. - Document and update the Team's process and Data Ingestion procedures. - Actively seek to improve and develop new content based upon observed security activity - Provide excellent customer service, as we will be required to interact/work with other teams to complete our daily tasks. The team At Deloitte, we're all about collaboration. And nowhere is this more apparent than among our 2,000-strong internal services team. With our combined specialist skills, we provide all the essential support and advice our client-facing colleagues need, right across the firm. This enables them to focus all of their efforts on delivering the best service possible to their clients. Covering seven distinct areas; Human Resources, Clients & Industries, Finance & Legal, Practice Support Services, Quality & Risk Services, IT Services, and Workplace Services & Real Estate, together we live, breathe and deliver the Deloitte experience Skills/abilities : - Experience with process creation, enhancement, and implementation. - Strong understanding and experience with Splunk. - Understanding of Cloud Services Azure, AWS. - Understanding of Splunk data onboarding processes. - Experience working with a strict change control process utilizing tools such as Azure DevOps. - Knowledge of networking, firewalls, load balancers etc. - Good communication skills and the ability to work appropriately with technical and nontechnical teams. - Good influencing and reasoning skills; good at conflict resolution and consensus building. Preferred: - Splunk Admin Certification - Cribl User Certification - Obtained an industry certification e.g. CISSP, GIAC, CISM - Experience in working in a large global organization How You'll Grow At Deloitte, we've invested a great deal to create a rich environment in which our professionals can grow. We want all our people to develop in their own way, playing to their own strengths as they hone their leadership skills. And, as a part of our efforts, we provide our professionals with a variety of learning and networking opportunitiesincluding exposure to leaders, sponsors, coaches, and challenging assignmentsto help accelerate their careers along the way. No two people learn in exactly the same way. So, we provide a range of resources including live classrooms, team-based learning, and eLearning. DU: The Leadership Center in India, our state-of-the-art, world-class learning Center in the Hyderabad offices is an extension of the Deloitte University (DU) in Westlake, Texas, and represents a tangible symbol of our commitment to our people's growth and development. Explore DU: The Leadership Center in India Benefits At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits. Learn more about what working at Deloitte can mean for you. Deloitte's culture Our positive and supportive culture encourages our people to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them to be healthy, centered, confident, and aware. We offer well-being programs and are continuously looking for new ways to maintain a culture that is inclusive, invites authenticity, leverages our diversity, and where our people excel and lead healthy, happy lives. Learn more about Life at Deloitte. Corporate citizenship Deloitte is led by a purpose: to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our people and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. Learn more about Deloitte's impact on the world. Recruiting tips From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters. Benefits At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits. Learn more about what working at Deloitte can mean for you. Our people and culture Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ideas and perspectives, and bring more creativity and innovation to help solve our client most complex challenges. This makes Deloitte one of the most rewarding places to work. Our purpose Deloitte's purpose is to make an impact that matters for our clients, our people, and in our communities. We are creating trust and confidence in a more equitable society. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. We are focusing our collective efforts to advance sustainability, equity, and trust that come to life through our core commitments. Learn more about Deloitte's purpose, commitments, and impact. Professional development From entry-level employees to senior leaders, we believe there's always room to learn. We offer opportunities to build new skills, take on leadership opportunities and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career. Requisition code: 182389