Job Role
- Splunk SIEM Engineering Senior Associate

Location:
Hyderabad | Bangalore

Experience:
7 – 16 Years Qualification: Any Graduate | Any Post Graduate | Any Diploma Client Facing: Yes – Client Calls Role Overview We are looking for an experienced Splunk SIEM Engineer to join PwC's Threat Detection & Response (TDR) Cyber Managed Services team. The ideal candidate should have strong hands-on experience in Splunk Enterprise / Splunk Cloud, Splunk Enterprise Security (ES), Splunk SOAR, detection engineering, log onboarding, threat detection and security automation. Mandatory Technical Skills
• Splunk SIEM: Splunk Enterprise / Splunk Cloud
• Splunk Enterprise Security: Correlation Searches, Alerts, Risk-Based Alerting (RBA)
• Splunk SOAR: Playbook Development, Automation and Orchestration
• Splunk SPL: Advanced Search Processing Language, Queries, Dashboards and Reports
• Log Onboarding: Universal Forwarders, Heavy Forwarders, HEC, Syslog
• Log Parsing: Sourcetypes, Props.conf, Transforms.conf, CIM Normalization
• Detection Engineering: MITRE ATT&CK; Framework, Threat Detection Use Cases
• Automation: Python Scripting, REST APIs, SOAR Playbooks
• Security Operations: Threat Hunting,



Incident Investigation and Alert Tuning Positive to Have Skills
• Splunk Certifications
• Splunk Security Content (ESCU)
• Git, CI/CD and Detection-as-Code
• Microsoft Sentinel / Google SecOps
• Palo Alto Cortex XSIAM / XSOAR
• CrowdStrike / Microsoft Defender / SentinelOne
• Generative AI and Machine Learning for Security Operations

Key Responsibilities
• Develop and maintain Splunk SIEM detection rules, correlation searches and security use cases.
• Manage Splunk Enterprise / Cloud and Enterprise Security platforms.
• Perform log source onboarding, parsing and CIM normalization.
• Develop and optimize Splunk SOAR playbooks and Python-based automations.
• Conduct threat hunting and advanced security investigations.
• Map detection use cases to the MITRE ATT&CK; framework.
• Handle complex security incidents and technical escalations. Interested candidates: Share your updated resume. Email: [email protected] Call / WhatsApp: +91 (phone hidden) If I'm unavailable on call, please leave a WhatsApp message, and I'll get back to you.

📌 Splunk SIEM Engineer (Bengaluru)
🏢 Ipivot
📍 Bengaluru