Splunk Engineer

EMBARKGCC SERVICES PRIVATE LIMITED; Bengaluru Urban; On-site; INR 900,000 - 1,400,000; Full time

Job summary

EMBARKGCC SERVICES PRIVATE LIMITED requires an SIEM Engineer (Splunk) to optimize our Splunk-based log management across on-premises and cloud environments. The role emphasizes ingestion, alerting, dashboards, and system performance with collaboration across teams.

The candidate should have a strong SPL background, experience with data onboarding, and scripting skills (Python) for automation, along with excellent documentation and communication abilities.

Qualifications

• Experience with Splunk data onboarding, field extractions and normalization.
• Proficient in creating dashboards and alerts using SPL.
• Strong troubleshooting and problem-solving abilities.
• Experience collaborating with cross-functional teams in enterprise environments.

Responsibilities

• Splunk infrastructure management across on-premises and cloud environments.
• Ensure reliable log ingestion from diverse systems and applications.
• Define data onboarding processes, field extractions, and normalization.
• Collaborate with asset-owning teams for forwarder coverage and log completeness.
• Create and maintain dashboards and SPL queries for operational visibility.
• Ensure accuracy of alerting mechanisms and resolve ingestion issues.
• Develop automation tools and document configurations and changes.

Skills

Splunk SPL

Data onboarding

Field extractions

Log normalization

AWS Cloud

Python scripting

Troubleshooting

Documentation

Cross-functional collaboration

Time management

Education

Bachelor's degree in Information Security, Computer Science, or related field

Master’s degree in Cybersecurity or Business Management (preferred)

Tools

Splunk

Job description

Bangalore North, India | Posted on 03/25/2026

We are seeking SIEM Engineer (Splunk) to support the ongoing operations and optimization of our Splunk-based log management infrastructure.These resources will play a critical role in ensuring effective log ingestion,alerting, dashboarding, and system performance across both on-premises and cloud environments.

Key Responsibilities (Project-Specific):

• Splunk Infrastructure Management: Maintain and optimize Splunk environments(on-premise and cloud).
  
• Ensure consistent and reliable log ingestion from diverse systems and applications.
  
• Data Onboarding & Management: Define and implement data onboarding processes, field extractions, and normalization.
  
• Collaborate with asset-owning teams to ensure forwarder coverage and log completeness.
  
• Alerting & Dashboards: Create and maintain dashboards and custom SPL queries for operational visibility.
  
• Ensure accuracy and effectiveness of alerting mechanisms within Splunk.
  
• Troubleshooting & Support: Investigate and resolve issues related to Splunk alerts and data ingestion.
  
• Provide solutions and recommendations for improving system performance.
  
• Automation & Documentation: Assist in developing automation tools for efficient Splunk management.
  
• Document procedures, configurations, and architectural changes.
  

Education:

• Bachelor’s degree in Information Security, Computer Science, or a related field. A Master’s degree in Cybersecurity or Business Management is preferred.
  

Required Skill Set:

• Proficiency in Splunk Query Language (SPL) for creating searches, alerts, and dashboards.
  
• Experience with Splunk data onboarding, field extractions, and log normalization.
  
• Familiarity with AWS Cloud environments and integration with Splunk.
  
• General scripting knowledge (Python preferred) for automation and tooling.
  
• Strong troubleshooting skills and ability to resolve complex Splunk-related issues.
  
• Experience collaborating with cross-functional teams in enterprise environments.
  
• Strong documentation and communication skills.
  
• Ability to manage time effectively and meet operational goals.