Splunk ES Platform Lead & Detection Engineer

NTT DATA Business Solutions; Cyberjaya; On-site; MYR 150,000 - 210,000; Full time

Job summary

NTT DATA Business Solutions seeks a highly technical Splunk Enterprise Security Engineer in Cyberjaya to own and optimise the Splunk ES platform. You will configure ES components, manage data onboarding, and drive detection engineering for SOC operations.

The role requires hands-on ES expertise, strong SPL/CIM knowledge, and collaboration with SOC teams to reduce alert fatigue and improve incident response. Travel as needed.

Qualifications

• Hands-on experience administering Splunk Enterprise and Splunk ES in large environments.
• Strong knowledge of SPL, CIM compliance, and data onboarding for security data sources.
• Experience building detection content and SOC workflows in Splunk ES.

Responsibilities

• Own and manage the Splunk ES platform for availability, performance, and scalability.
• Develop and tune detection use cases aligned with SOC requirements.
• Lead onboarding of security data sources and ensure CIM consistency.
• Create dashboards and KPIs to monitor SOC performance and detection coverage.
• Collaborate with SOC analysts and IT teams for investigations and automation.

Skills

Splunk ES

Detection Eng.

SOC Enablement

Dashboards

RBA/Alerts

Data Onboarding

Education

Bachelor's degree

Job description

NTT DATA Business Solutions seeks a highly technical Splunk Enterprise Security Engineer in Cyberjaya to own and optimise the Splunk ES platform. You will configure ES components, manage data onboarding, and drive detection engineering for SOC operations.

The role requires hands-on ES expertise, strong SPL/CIM knowledge, and collaboration with SOC teams to reduce alert fatigue and improve incident response. Travel as needed.