Job DescriptionHiring: L4 Active Splunk Enterprise Certified Architect

NWe're looking for a L4 Active Splunk Enterprise Certified Architect

NKey Skills:

N

n
- Lead the assessment of the client's SIEM platform, ensuring thorough evaluation and documentation of its current state.
N
- Obtain and review all relevant documentation related to the SIEM deployment, including architecture diagrams, data flow diagrams, process flows, and procedures.
N
- Track and report on information security controls and their effectiveness, making recommendations for improvements.
N
- Contribute to creating documentation required for ongoing security support and maintenance of Security Platforms
N
- Support the Security Assurance function by providing operational requirements for projects.
N
- Assist client to make log sources CIM compliant.
N
- Analyze the SIEM platform across focus areas following SIEM Assessment Framework, which includes:
N
- System Architecture: Evaluate SIEM's system components (forwarders, search heads, indexers, etc.), assess non-functional requirements (availability, scalability, performance, data retention, monitoring), review the health monitoring process,



and examine the current integration with the ServiceNow Security Incident Response (SIR) module.
N
- Data Management: Evaluate data management processes including data source onboarding and prioritization, data pipelines, log streaming, data quality and normalization, and data enrichment.
N
- Use Case Development: Evaluate intake, prioritization, development, and detection-as-code processes.
N
- Governance: Evaluate the existing governance framework, operating and interaction models, relevant policies and standards, governing committees and working groups, and training programs.
N

nRequired Skills:

N

n
- Active Splunk Enterprise Certified Administrator Architect credential.
N
- 7+ years of hands-on experience with Splunk ES.
N
- Proven experience in managing and leading SIEM assessments with a focus on Splunk.
N
- Solid understanding ofSIEM system components, data management processes, use case development, and governance frameworks.
N
- Strong communication and leadership skills, with the ability to lead a team of consultants and interact effectively with client teams
N

nPlease share your profiles at [email protected]

📌 Splunk Architect (Bengaluru)
🏢 NTT DATA
📍 Bengaluru