Senior Cybersecurity Engineer Splunk

Tata Consultancy Services; Irving (TX); On-site; USD 115,000 - 130,000; Full time

Job summary

Tata Consultancy Services in Irving, TX is seeking an experienced Splunk Security Analyst to lead monitoring, log onboarding, and analytics for a divestiture program. You will configure dashboards, alerts, and reporting while ensuring secure separation of in-scope systems.

The role requires 5–8 years in SIEM operations, expertise with Splunk Enterprise and SPL, and strong troubleshooting, documentation, and communication skills. Bachelor’s degree or equivalent experience is required.

Qualifications

• Hands-on experience with Splunk Enterprise and Splunk Enterprise Security.
• 5-8 years of experience in security analytics and SIEM operations.
• Expertise in log onboarding, parsing, normalization, dashboards, alerts, and correlation rules.
• Strong knowledge of SIEM operations, threat detection, and security monitoring.
• Experience with application, infrastructure, network, IAM, endpoint, and cloud security logs.
• Proficiency in SPL and scripting (Python, PowerShell, APIs) for automation.
• Experience supporting logging and monitoring separation activities in large enterprise environments.
• Strong troubleshooting, analytical, documentation, and communication skills

Responsibilities

• Lead Splunk monitoring, log onboarding, and security analytics activities for the divestiture program.
• Configure and validate log ingestion, dashboards, alerts, correlation rules, and reporting.
• Support Splunk monitoring separation and transition for in-scope systems and entities.
• Troubleshoot data ingestion, indexing, alerting, and performance issues.
• Collaborate with infrastructure, network, IAM, application, and security teams.
• Develop operational documentation, monitor reports, and audit evidence

Skills

Splunk Enterprise

Splunk Enterprise Security

SPL

Python

PowerShell

APIs

Security monitoring

Threat detection

Documentation

Communication skills

Education

Bachelor's degree

Tools

Splunk Enterprise

Python

PowerShell

APIs

Job description

• Hands-on experience with Splunk Enterprise and Splunk Enterprise Security.
• 5-8 years of experience
• Expertise in log onboarding, parsing, normalization, dashboards, alerts, and correlation rules.
• Strong knowledge of SIEM operations, threat detection, and security monitoring.
• Experience with application, infrastructure, network, IAM, endpoint, and cloud security logs.
• Proficiency in SPL and scripting (Python, PowerShell, APIs) for automation.
• Experience supporting logging and monitoring separation activities in large enterprise environments.
• Strong troubleshooting, analytical, documentation, and communication skills
• Effective written and verbal communication skills
• Effective analytic/diagnostic skills
• Bachelor's degree/University degree or equivalent experience

Job Description

Must Have Technical/Functional Skills

• Hands-on experience with Splunk Enterprise and Splunk Enterprise Security.
• 5-8 years of experience
• Expertise in log onboarding, parsing, normalization, dashboards, alerts, and correlation rules.
• Strong knowledge of SIEM operations, threat detection, and security monitoring.
• Experience with application, infrastructure, network, IAM, endpoint, and cloud security logs.
• Proficiency in SPL and scripting (Python, PowerShell, APIs) for automation.
• Experience supporting logging and monitoring separation activities in large enterprise environments.
• Strong troubleshooting, analytical, documentation, and communication skills
• Effective written and verbal communication skills
• Effective analytic/diagnostic skills
• Bachelor's degree/University degree or equivalent experience

Roles & Responsibilities

Services

• Lead Splunk monitoring, log onboarding, and security analytics activities for the divestiture program.
• Configure and validate log ingestion, dashboards, alerts, correlation rules, and reporting.
• Support Splunk monitoring separation and transition for in-scope systems and entities.
• Troubleshoot data ingestion, indexing, alerting, and performance issues.
• Collaborate with infrastructure, network, IAM, application, and security teams.
• Develop operational documentation, monitor reports, and audit evidence

Deliverables

• Splunk Monitoring & Detection Framework – Configured dashboards, alerts, and correlation rules.
• Log Onboarding & Validation Reports – Verified data ingestion and monitoring coverage.
• Monitoring Gap & Remediation Tracker – Identified issues and resolution status.
• Splunk Operational Documentation – Runbooks, configurations, and support procedures.
• Security Monitoring & Audit Readiness Reports – Control assurance, coverage, and compliance evidence.
• Divestiture Monitoring Transition Package – Validated monitoring capabilities supporting secure separation

Salary Range: $115,000 to $130,000 per year

Qualifications:

BACHELOR OF COMPUTER SCIENCE