Job DescriptionHiring: L4 Active Splunk Enterprise Certified Architect
NWe're looking for a L4 Active Splunk Enterprise Certified Architect
NKey Skills:
N
n
Lead the assessment of the client's SIEM platform, ensuring thorough evaluation and documentation of its current state. N
Obtain and review all relevant documentation related to the SIEM deployment, including architecture diagrams, data flow diagrams, process flows, and procedures. N
Track and report on information security controls and their effectiveness, making recommendations for improvements. N
Contribute to creating documentation required for ongoing security support and maintenance of Security Platforms N
Support the Security Assurance function by providing operational requirements for projects. N
Assist client to make log sources CIM compliant. N
Analyze the SIEM platform across focus areas following SIEM Assessment Framework, which includes: N
System Architecture: Evaluate SIEM's system components (forwarders, search heads, indexers, etc.),



assess non-functional requirements (availability, scalability, performance, data retention, monitoring), review the health monitoring process, and examine the current integration with the ServiceNow Security Incident Response (SIR) module. N
Data Management: Evaluate data management processes including data source onboarding and prioritization, data pipelines, log streaming, data quality and normalization, and data enrichment. N
Use Case Development: Evaluate intake, prioritization, development, and detection-as-code processes. N
Governance: Evaluate the existing governance framework, operating and interaction models, relevant policies and standards, governing committees and working groups, and training programs. N

nRequired Skills:
N
n
Active Splunk Enterprise Certified Administrator Architect credential. N
7+ years of hands-on experience with Splunk ES. N
Proven experience in managing and leading SIEM assess

📌 Splunk Architect Karnataka
🏢 NTT Data
📍 Karnataka