At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

Staff (CTM – Threat Detection & Response)

KEY Capabilities:
Experience in working with Splunk Enterprise, Splunk Enterprise Security & Splunk UEBA
Minimum of Splunk Power User Certification
Valuable knowledge in programming or Scripting languages such as Python (preferred), JavaScript (preferred), Bash, PowerShell, Bash, etc.
Assist in remote and in office gap assessment of the SIEM solution.
Work on defined evaluation criteria & approach based on the Client requirement & scope factoring industry best practices & regulations
Assist in interview with stakeholders, review documents (SOPs, Architecture diagrams etc.)
Asist in evaluating SIEM based on the defined criteria and prepare audit reports
Positive experience in providing consulting to customers during the testing, evaluation, pilot,



production and training phases to ensure a successful deployment.
Experience in onboarding data into Splunk from various sources including unsupported (in-house built) by creating custom parsers
Verification of data of log sources in the SIEM, following the Common Information Model (CIM)
Experience in parsing and masking of data prior to ingestion in SIEM
Provide support for the data collection, processing, analysis and operational reporting systems including planning, installation, configuration, testing, troubleshooting and problem resolution
Assist clients to fully optimize the SIEM system capabilities as well as the audit and logging features of the event log sources
Assist client with technical guidance to configure their log sources (in-scope) to be integrated to the SIEM
Experience in SIEM content development which includes :
Hands-on experience in development and customization of Splunk Apps & Add-Ons
Builds advan

📌 Tc Cs Cdr Splunk Staff Delhi
🏢 EY Studio+ Nederland
📍 Delhi