Job DescriptionHiring: L4 Active Splunk Enterprise Certified Architect
NWe're looking for a L4 Active Splunk Enterprise Certified Architect
NKey Skills:
N
- n
- Lead the assessment of the client's SIEM platform, ensuring thorough evaluation and documentation of its current state. N
- Obtain and review all relevant documentation related to the SIEM deployment, including architecture diagrams, data flow diagrams, process flows, and procedures. N
- Track and report on information security controls and their effectiveness, making recommendations for improvements. N
- Contribute to creating documentation required for ongoing security support and maintenance of Security Platforms N
- Support the Security Assurance function by providing operational requirements for projects. N
- Assist client to make log sources CIM compliant. N
- Analyze the SIEM platform across focus areas following SIEM Assessment Framework, which includes: N
- System Architecture: Evaluate SIEM's system components (forwarders, search heads, indexers, etc.),



assess non-functional requirements (availability, scalability, performance, data retention, monitoring), review the health monitoring process, and examine the current integration with the ServiceNow Security Incident Response (SIR) module. N
- Data Management: Evaluate data management processes including data source onboarding and prioritization, data pipelines, log streaming, data quality and normalization, and data enrichment. N
- Use Case Development: Evaluate intake, prioritization, development, and detection-as-code processes. N
- Governance: Evaluate the existing governance framework, operating and interaction models, relevant policies and standards, governing committees and working groups, and training programs. N

nRequired Skills:
N
- n
- Active Splunk Enterprise Certified Administrator Architect credential. N
- 7+ years of hands-on experience with Splunk ES. N
- Proven experience in managing and leading SIEM assess

📌 Splunk Architect (Karnataka)
🏢 NTT DATA
📍 Karnataka