T&T I Cyber-D&R I Deputy Manager | Splunk ES Engineer | Mumbai, Pune

• Job requisition ID : 105929 

• Location: Mumbai

• Entity: Deloitte Touche Tohmatsu India LLP 

The team 

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity 

Your work profile 

As Deputy Manager in our Cyber Team, you’ll build and nurture positive working relationships with teams and clients with the intention to exceed client expectations 

Resource will be responsible for End2End Splunk Infrastructure Migration from Physical to Virtual. 

Deploy, Configure, & Manage Splunk Infrastructure (Indexers, Forwarders, Search Heads, Clustering etc.). 

Onboard & Parse New Data Sources into Splunk from Various Platforms (Linux, Windows, Cloud Services, Network Devices, etc.). 

Create & Manage Splunk Knowledge Objects: Dashboards, Alerts, Reports, Saved Searches. 

Manage User Roles, Authentication (e.g., LDAP, SSO), & Access Control. 

Key skills required: 

Overall experience 6-10 years. SIEM Splunk Enterprise Security administrator Splunk Enterprise, Splunk Enterprise Security and Splunk ITSI.  

Experience in managing, supporting, deploying and documenting monitoring solutions 

Experience with Splunk data, use case, deployment, Splunk reporting, Splunk knowledge objects, Splunk searching & optimization . Knowledge of OpenSearch and migration from Splunk to OpenSearch 

Excellent communication and analytical skills with ability to present technical details to the stakeholders in technical and non-technical backgrounds. 

Very good experience in migration of Splunk indices and dashboards to OpenSearch/ElasticSearch. 

Experience administering and/or developing for an enterprise level implementation of Splunk and OpenSearch (clustered architecture). 

Education: Bachelor’s degree in information security, Computer Science, or a related field. A master’s in business management is preferred.