Senior Splunk Enterprise Security Engineer SIEM & SOC Expert

NTT DATA Business Solutions; Cyberjaya; On-site; MYR 120,000 - 180,000; Full time

Benefits offered by this job

Medical Insurance

Health Insurance

Optical and Dental Benefits

Job summary

NTT DATA Business Solutions in Cyberjaya is seeking a highly technical Splunk Enterprise Security (ES) Engineer to lead enterprise Splunk environments and SIEM capabilities. The role focuses on platform stability, data quality, and detection engineering within a SOC context.

The ideal candidate will manage production Splunk environments, implement data onboarding, CIM normalization, correlation searches, and Risk-Based Alerting, while collaborating with SOC analysts to improve threat detection

Qualifications

• Hands-on experience with Splunk Enterprise in production environments.
• Experience deploying, upgrading, migrating, and troubleshooting Splunk infrastructure.
• Experience onboarding data sources, CIM compliance, and data normalization.
• Developing, maintaining, and tuning correlation searches.
• Designing and implementing Risk-Based Alerting (RBA).
• Creating and managing notable events and SOC workflows.
• Building SIEM use cases with Splunk Enterprise Security.

Responsibilities

• Manage and support production Splunk Enterprise environments.
• Deploy, upgrade, migrate, and troubleshoot Splunk infrastructure.
• Design and implement log forwarding and data onboarding solutions.
• Create Splunk dashboards, reports, and monitoring solutions.
• Build and operate SIEM use cases with Splunk ES.
• Develop correlation searches, notable events, and RBA.
• Collaborate with SOC teams to enhance threat detection and reduce alerts.

Skills

Splunk Enterprise

Splunk Enterprise Security (ES)

SIEM engineering

SOC collaboration

Data ingestion troubleshooting

Tools

Splunk Forwarders

Deployment Server

Search Heads

Job description

NTT DATA Business Solutions in Cyberjaya is seeking a highly technical Splunk Enterprise Security (ES) Engineer to lead enterprise Splunk environments and SIEM capabilities. The role focuses on platform stability, data quality, and detection engineering within a SOC context.

The ideal candidate will manage production Splunk environments, implement data onboarding, CIM normalization, correlation searches, and Risk-Based Alerting, while collaborating with SOC analysts to improve threat detection