Senior Splunk Security Engineer (L4)

Make an impact with NTT DATA
Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

Your day at NTT DATA

We are seeking a skilled and experienced Splunk Engineer to join our dynamic IT team for a client. As a Splunk Engineer, you will play a crucial role in maintaining and optimizing our Splunk infrastructure to ensure the efficient collection, indexing, and analysis of machine-generated data. You will collaborate with cross-functional Security teams to implement and manage Splunk solutions that meet the organization's operational and security needs.

What you'll be doing

Key Responsibilities:

1. Splunk Infrastructure Management

- Install, configure, and maintain Splunk components, including Splunk Enterprise, Splunk Universal Forwarder, and Splunk Heavy Forwarder.
- Monitor and optimize the performance of Splunk clusters to ensure efficient data processing and search capabilities.
- Troubleshoot and resolve issues related to Splunk infrastructure, ensuring high availability and reliability.

2. Data Ingestion and Parsing:

- Design and implement data ingestion strategies for various log sources into Splunk.
- Develop and maintain parsing configurations to normalize and enrich incoming data for effective analysis.
- Collaborate with application owners and IT teams to onboard new data sources into Splunk.

3. Search and Reporting:

- Create and optimize search queries and reports to extract valuable insights from the indexed data.
- Customize and implement Splunk dashboards for different stakeholders to visualize key performance indicators and security metrics.

4. Security and Compliance:

- Implement security best practices within Splunk to safeguard sensitive data.
- Collaborate with the security team to configure and monitor alerts for suspicious activities or security incidents.
- Ensure compliance with industry regulations and internal policies related to log management and data retention.

5. Automation and Scripting:

- Develop automation scripts using SPL (Search Processing Language) and other scripting languages to streamline administrative tasks.
- Continuously seek opportunities to improve efficiency through automation in Splunk processes.

6. Documentation and Training:

- Maintain thorough documentation of Splunk configurations, processes, and troubleshooting procedures.
- Provide training and support to other IT team members on Splunk best practices and usage.

Qualifications:

- Bachelor's degree in Computer Science, Information Security, or a related field.
- Proven experience as a Splunk Engineer in enterprise-level environments.
some experience in network and application security, with expertise in Palo Alto, Bluecoat, F5 (LTM, ASM, APM),  ASA VPN is an asset.
- Strong knowledge of Splunk architecture, components, and best practices.
- Proficient in SPL and scripting languages like Python or Bash.
- Experience in designing and implementing data ingestion strategies.
- Solid understanding of security principles and their application in Splunk.
- Excellent problem-solving and troubleshooting skills, with the ability to work well under pressure.
- Strong communication skills and the ability to collaborate with diverse teams.
- A proactive approach to identifying and mitigating security vulnerabilities and risks.
- Demonstrated ability to work in a fast-paced and dynamic environment.
- Fluent in English
- Relevant certifications are a plus.
- The candidate must be native from a NATO country and a valid NATO Secret Clearance is a plus.
 

Workplace type:

About NTT DATA
NTT DATA is a $30+ billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long-term success. We invest over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure, and connectivity. We are also one of the leading providers of digital and AI infrastructure in the world. NTT DATA is part of NTT Group and headquartered in Tokyo.

Equal Opportunity Employer
NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.