Job Role - Splunk SIEM Engineering Senior Associate

Location: Hyderabad | Bangalore

Experience: 7 – 16 Years

Qualification: Any Graduate | Any Post Graduate | Any Diploma

Client Facing: Yes – Client Calls

Role Overview

We are looking for an experienced Splunk SIEM Engineer to join PwC's Threat Detection & Response (TDR) Cyber Managed Services team.

The ideal candidate should have robust hands-on experience in Splunk Enterprise / Splunk Cloud, Splunk Enterprise Security (ES), Splunk SOAR, detection engineering, log onboarding, threat detection and security automation.

Mandatory Technical Skills

- Splunk SIEM: Splunk Enterprise / Splunk Cloud
- Splunk Enterprise Security: Correlation Searches, Alerts, Risk-Based Alerting (RBA)
- Splunk SOAR: Playbook Development, Automation and Orchestration
- Splunk SPL: Advanced Search Processing Language, Queries, Dashboards and Reports
- Log Onboarding: Universal Forwarders, Heavy Forwarders, HEC, Syslog
- Log Parsing: Sourcetypes, Props.conf, Transforms.conf, CIM Normalization
- Detection Engineering: MITRE ATT&CK; Framework, Threat Detection Use Cases
- Automation: Python Scripting, REST APIs, SOAR Playbooks
- Security Operations: Threat Hunting,



Incident Investigation and Alert Tuning

Good to Have Skills

- Splunk Certifications
- Splunk Security Content (ESCU)
- Git, CI/CD and Detection-as-Code
- Microsoft Sentinel / Google SecOps
- Palo Alto Cortex XSIAM / XSOAR
- CrowdStrike / Microsoft Defender / SentinelOne
- Generative AI and Machine Learning for Security Operations

Key Responsibilities

- Develop and maintain Splunk SIEM detection rules, correlation searches and security use cases.
- Manage Splunk Enterprise / Cloud and Enterprise Security platforms.
- Perform log source onboarding, parsing and CIM normalization.
- Develop and optimize Splunk SOAR playbooks and Python-based automations.
- Conduct threat hunting and advanced security investigations.
- Map detection use cases to the MITRE ATT&CK; framework.
- Handle complex security incidents and technical escalations.

Interested candidates: Share your updated resume.

Email: [email protected]

Call / WhatsApp: +91 (phone hidden)

If I'm unavailable on call, please leave a WhatsApp message, and I'll get back to you.

📌 Splunk SIEM Engineer (Bengaluru)
🏢 Ipivot
📍 Bengaluru