Role Summary The Splunk SIEM Engineer administers, maintains and optimizes the Splunk platform supporting the Telecom SOC and its integrated security and telecom data sources.

Key Responsibilities

Administer Splunk Enterprise and Splunk Enterprise Security.

Configure and support forwarders, indexers and search components.

Onboard security, IT and telecom log sources.

Develop and maintain source types, parsing and field extractions.

Support CIM mapping and data normalization.

Troubleshoot missing, delayed, duplicated or incorrectly parsed events.

Monitor ingestion health, platform capacity and search performance.

Manage applications, add-ons, indexes and retention configurations.

Support distributed and clustered Splunk environments.

Coordinate upgrades,



patches and platform changes.

Support disaster recovery and service-continuity activities.

Required Skills

Strong Splunk administration and troubleshooting experience.

Experience with syslog, APIs, collectors and universal/heavy forwarders.

Knowledge of Splunk ES, CIM and data models.

Solid Linux and networking fundamentals.

Experience integrating security platforms with Splunk.

Understanding of high availability, clustering and capacity management.

Ability to provide on-call production support.

📌 Splunk Administrator (Noida)
🏢 Talent21
📍 Noida