Splunk SIEM Specialist
- Kiya.ai
- 5 - 8 years
- Hyderabad
- 4 months ago
- Email to a friend
- Report this job
Job Description
Job Title: Splunk SIEM Specialist
Position Overview
We are seeking an experienced Splunk SIEM Specialist to design, implement, and manage enterprise-level SIEM solutions. The role involves end-to-end Splunk administration, log source onboarding, detection content development, and platform optimization to enhance our organizations security monitoring and incident detection capabilities. The ideal candidate will bring strong expertise in Splunk Enterprise Security along with a solid understanding of security operations and log management.
Key Responsibilities
- Lead and execute SIEM migrations and implementations, including planning, deployment, and validation.
- Onboard and normalize diverse log sources into Splunk, ensuring CIM (Common Information Model) compliance.
- Develop and optimize detection content such as correlation rules, dashboards, alerts, and reports.
- Troubleshoot and resolve issues related to log ingestion, parsing, and Splunk platform performance.
- Perform regular platform administration and optimization including indexing, storage, and search tuning.
- Manage Splunk components (indexers, search heads, forwarders) and oversee upgrades and patches.
- Deploy and configure Splunk SIEM solutions across on-premises and cloud environments.
- Conduct gap analysis of log sources and use cases; develop new use cases aligned with emerging threats.
- Collaborate with stakeholders and security teams to deliver actionable monitoring and threat detection solutions.
Required Skills & Qualifications
- Minimum 3 years of hands-on experience with Splunk SIEM (Enterprise Security preferred).
- Strong understanding of SIEM concepts, log management, and SOC operations.
- Proven experience in log source onboarding, parsing, and CIM compliance.
- Expertise in detection content creation (correlation rules, dashboards, alerts) and tuning.
- Solid troubleshooting skills for both Splunk platform and security content.
- Experience in Splunk deployment, administration, and health monitoring.
- Ability to conduct gap analysis and provide actionable recommendations.
- Strong communication and documentation skills.
- Relevant certifications (e.g., Splunk Certified Admin, Splunk Enterprise Admin, Splunk Certified Architect) are an advantage.
Preferred Experience
- Strong knowledge of security fundamentals and threat detection.
- Hands-on experience with cloud SIEM deployments (AWS, Azure, GCP).
- Familiarity with scripting languages (Python, Bash) for automation.
- Exposure to other SIEM platforms (QRadar, Sentinel, XSIAM, SecOps) is beneficial.
Job Classification
Industry: FinTech / PaymentsFunctional Area / Department: IT & Information SecurityRole Category: IT SecurityRole: IT Security - OtherEmployement Type: Full timeContact Details:
Company: Kiya.aiLocation(s): Hyderabad
Keyskills: Splunk SIEM Splunk administration SIEM optimization Azure normalization GCP Troubleshooting Content development AWS Log onboarding
Similar positions
Kiya.ai
The Company is a specialist banking and financial industry IT solutions company with a decade of successful operations. We help creating new business models with our software products, solutions and specialized services. We are an ISO9001 and CMM Level 5 Company having a global foot print with opera...
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in