Splunk Development & Administration Cyber Security Analyst

Sopra Steria Group; Chennai District; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Sopra Steria Group is seeking a Cyber Security Analyst specializing in Splunk Development and Administration. The ideal candidate will manage and optimize Splunk applications while monitoring infrastructure components to ensure performance and data integrity.

This role requires 4-6 years of experience in cyber security, strong scripting skills, and a Bachelor's degree in IT or Computer Engineering. The position involves working in European shifts and supports a diverse work environment.

Qualifications

• 4–6 years of experience in Splunk Administration and Cyber Security.
• Strong understanding of CI/CD pipelines and DevSecOps practices.
• Ability to work in European shifts or 24/7.

Responsibilities

• Implement and manage Splunk applications and upgrades.
• Monitor and maintain Splunk infrastructure components.
• Automate routine administrative tasks using scripting.

Skills

Splunk Administration

Data onboarding

Bash scripting

Python scripting

Collaboration

Education

B.E./B.Tech in IT or Computer Engineering

Tools

Splunk

ServiceNow

GitHub

AWS

GCP

Terraform

Ansible

Job description

Splunk Development & Administration Cyber Security Analyst

Job Type: Full-time

About Sopra Steria
Sopra Steria, a major Tech player in Europe with 51,000 employees in nearly 30 countries, is recognised for its consulting, digital services and solutions. It helps its clients drive their digital transformation and obtain tangible and sustainable benefits. The Group provides end-to-end solutions to make large companies and organisations more competitive by combining in-depth knowledge of a wide range of business sectors and innovative technologies with a collaborative approach. Sopra Steria places people at the heart of everything it does and is committed to putting digital to work for its clients in order to build a positive future for all. In 2025, the Group generated revenues of €5.6 billion.
The world is how we shape it.

The ideal candidate will work primarily on Splunk Administration (L2 Support) however experience of development will be an add-on.

Job Description and Key Skills

• Implement and manage Splunk applications and add‑ons version upgrades and lifecycle management, including versioning for applications such as Sanity and Compliance platforms.
• Perform data onboarding, parsing, normalization, and STIX‑based input/output integration for security and compliance use cases.
• Design, develop, optimise, and troubleshoot Splunk dashboards, searches, alerts, and reports to improve operational visibility and performance.
• Manage and optimise Splunk configurations including inputs.conf, props.conf, transforms.conf, and other deployment configurations.
• Monitor and maintain Splunk infrastructure components such as Indexers, Search Heads, Forwarders, and Cluster environments to ensure high availability, performance and data integrity.
• Investigate incidents, perform root cause analysis (RCA), resolve operational issues independently and escalated complex cases to L3 support when required.
• Execute controlled deployments of Splunk apps, add‑ons, knowledge objects, and configuration changes across environments.
• Collaborate with application teams, data owners, and analysts for onboarding, validation, troubleshooting and optimisation of log sources.
• Configure and support integrations with enterprise platforms including ServiceNow, AWS, Azure, GCP, DB Connect, ITSI, Akamai, ServiceNow, Okta Identity.
• Handle user provisioning, RBAC access management and security governance within Splunk environments.
• Monitor indexing latency, ingestion rates, storage utilisation and overall platform health; identify and resolve performance bottlenecks proactively.
• Automate routine administrative and operational tasks using Bash, Python, PowerShell and scripting techniques.
• Support CI/CD pipelines implementation and DevSecOps practices using tools such as GitHub, Jenkins, and cloud‑native integrations.
• Work collaboratively with cross‑functional teams and other projects within the 3SIP program to ensure alignment and successful delivery.
• Create and maintain technical documentation, operational procedures, deployment guides and knowledge base articles.
• Apply strong understanding of Splunk architecture, distributed deployments, CIM, SIEM concepts, and ITIL best practices for incident, problem, and change management.
• Contribute to continuous improvement initiatives, operational excellence and monitoring best practices across the Splunk ecosystem.

Tools: Splunk, ServiceNow, GitHub, Terraform, AWS, GCP, Ansible

Certifications:

• Splunk Core Certified User / Splunk Core Certified Power User

Total Experience Expected: 04–06 years

B.E./B.Tech in IT or Computer Engineering.

To be able to work in European shifts or 24/7.

At our organization, we foster a work environment that is inclusive and respectful of all differences.

All of our positions are open to people with disabilities.