Job DescriptionHiring: L4 Active Splunk Enterprise Certified Architect
nWe're looking for a L4 Active Splunk Enterprise Certified Architect
nKey Skills:
n
- n
- Lead the assessment of the client's SIEM platform, ensuring thorough evaluation and documentation of its current state.n
- Obtain and review all relevant documentation related to the SIEM deployment, including architecture diagrams, data flow diagrams, process flows, and procedures.n
- Track and report on information security controls and their effectiveness, making recommendations for improvements.n
- Contribute to creating documentation required for ongoing security support and maintenance of Security Platformsn
- Support the Security Assurance function by providing operational requirements for projects.n
- Assist client to make log sources CIM compliant.n
- Analyze the SIEM platform across focus areas following SIEM Assessment Framework, which includes:n
- System Architecture: Evaluate SIEM's system components (forwarders, search heads, indexers, etc.), assess non-functional requirements (availability,



scalability, performance, data retention, monitoring), review the health monitoring process, and examine the current integration with the ServiceNow Security Incident Response (SIR) module.n
- Data Management: Evaluate data management processes including data source onboarding and prioritization, data pipelines, log streaming, data quality and normalization, and data enrichment.n
- Use Case Development: Evaluate intake, prioritization, development, and detection-as-code processes.n
- Governance: Evaluate the existing governance framework, operating and interaction models, relevant policies and standards, governing committees and working groups, and training programs.n

nRequired Skills:
n
- n
- Active Splunk Enterprise Certified AdministratorArchitect credential.n
- 7+ years of hands-on experience with Splunk ES.n
- Proven experience in managing and leading SIEM assessments with a focus

📌 Splunk Architect (Vasanthanagar)
🏢 NTT DATA
📍 Vasanthanagar