Splunk Engineer - Analyst Job in Hyderabad at Deloitte

Deloitte is hiring for the role of Splunk Engineer - Analyst!

Responsibilities of the Candidate:

• Provide proficient knowledge of recognizing and onboarding new data sources into Splunk, analyzing the data for parsing purposes to make it CIM compliant.
• Provide skillful knowledge on Cribl as we are heavily working on Cribl for data ingestion.
• Work with other Cybersecurity Engineering team members and will be required to interact with end users to gather requirements, perform troubleshooting, and aid with the creation of Splunk search queries and dashboards as required.
• Will be required interact with senior management, as necessary.
• Troubleshoot performance alerts from the Splunk infrastructure or Splunk agents
• Assist in the testing of vendor patches for all security applications the Engineering team operational support.
• Maintain the Cybersecurity Engineering group in ServiceNow and ensure all request and incident SLA’s as met as required by our stakeholders.
• Document and update the Team’s process and Data Ingestion procedures.
• Actively seek to improve and develop new content based upon observed security activity
• Provide excellent customer service, as we will be required to interact/work with other teams to complete our daily tasks.

Requirements:

• Bachelor’s degree in Computer Science or Business Administration, or relevant educational or professional experience.
• 3 years of related experience including 1 to 3 years in Splunk Administration.
• Strong Working Knowledge of the Splunk and Cribl Platform.
• Ability to troubleshoot performance and issues, as well as installation and Splunk upgrades
• Strong experience in analyzing, troubleshooting and providing solutions for technical issues.
• Experience with Splunk Enterprise Security.
• Experience in Syslog, Splunk HTTP Event collection (HEC).
• Experience in ingesting logs from DB Connect app.
• Creating Alerts, Dashboards and reports in Splunk Tool. Writing Scripts and configure in Splunk Servers.
• Experience with Splunk integration to AWS, Azure, and GCP.
• Knowledge and experience in GIT.
• Experience in requirement gathering and documentation.
• Experience in Log parsing, lookups, calculated fields extractions using regular expression(regex).
• Hands-on Experience in Cribl
• Sound judgment skills and ability to manage escalations.
• Determines methods and procedures on new assignments with minimal instruction,
• Excellent interpersonal and organizational skills.