AmbitionBox
Search
Jobs
- Reviews
- Salaries
- Interview Questions
- About Company
- Benefits
- Jobs
- Office Photos
- Community
Add office photos
Engaged Employer
i
This company page is being actively managed by
Ernst & Young Team. If you also belong to the team, you
can get access from
here
Ernst & Young
Compare
All Filters
2153 Ernst & Young Jobs
GMS-Senior-Splunk SIEM TechOps
Ernst & Young
posted 4hr ago
Job Role Insights
Flexible timing
Key skills for the job
Job Description
- Experience in working with Splunk Enterprise, Splunk Enterprise Security & Splunk UEBA
- Minimum of Splunk Power User Certification
- Good knowledge in programming or Scripting languages such as Python (preferred), JavaScript (preferred), Bash, PowerShell, Bash, etc.
- Perform remote and on-site gap assessment of the SIEM solution.
- Define evaluation criteria & approach based on the Client requirement & scope factoring industry best practices & regulations
- Conduct interview with stakeholders, review documents (SOPs, Architecture diagrams etc.)
- Evaluate SIEM based on the defined criteria and prepare audit reports
- Good experience in providing consulting to customers during the testing, evaluation, pilot, production and training phases to ensure a successful deployment.
- Understand customer requirements and recommend best practices for SIEM solutions.
- Offer consultative advice in security principles and best practices related to SIEM operations
- Design and document a SIEM solution to meet the customer needs
- Experience in onboarding data into Splunk from various sources including unsupported (in-house built) by creating custom parsers
- Verification of data of log sources in the SIEM, following the Common Information Model (CIM)
- Experience in parsing and masking of data prior to ingestion in SIEM
- Provide support for the data collection, processing, analysis and operational reporting systems including planning, installation, configuration, testing, troubleshooting and problem resolution
- Assist clients to fully optimize the SIEM system capabilities as well as the audit and logging features of the event log sources
- Assist client with technical guidance to configure end log sources (in-scope) to be integrated to the SIEM
- Experience in handling big data integration via Splunk
- Expertise in SIEM content development which includes developing process for automated security event monitoring and alerting along with corresponding event response plans for systems
- Hands-on experience in development and customization of Splunk Apps & Add-Ons
- Builds advanced visualizations (Interactive Drilldown, Glass tables etc.)
- Build and integrate contextual data into notable events
- Experience in creating use cases under Cyber kill chain and MITRE attack framework
- Capability in developing advanced dashboards (with CSS, JavaScript, HTML, XML) and reports that can provide near real time visibility into the performance of client applications.
- Experience in installation, configuration and usage of premium Splunk Apps and Add-ons such as ES App, UEBA, ITSI etc
- Sound knowledge in configuration of Alerts and Reports.
- Good exposure in automatic lookup, data models and creating complex SPL queries.
- Create, modify and tune the SIEM rules to adjust the specifications of alerts and incidents to meet client requirement
- Work with the client SPOC to for correlation rule tuning (as per use case management life cycle), incident classification and prioritization recommendations
- Experience in creating custom commands, custom alert action, adaptive response actions etc.
Qualification & experience
- Minimum of 3 to 10 years experience with a depth of network architecture knowledge that will translate over to deploying and integrating a complicated security intelligence solution into global enterprise environments.
- Strong oral, written and listening skills are an essential component to effective consulting.
- Strong background in network administration. Ability to work at all layers of the OSI models, including being able to explain communication at any level is necessary.
- Must have knowledge of Vulnerability Management, Windows and Linux basics including installations, Windows Domains, trusts, GPOs, server roles, Windows security policies, user administration, Linux security and troubleshooting.
- Good to have below mentioned experience with designing and implementation of Splunk with a focus on IT Operations, Application Analytics, User Experience, Application Performance and Security Management
- Multiple cluster deployments & management experience as per Vendor guidelines and industry best practices
- Troubleshoot Splunk platform and application issues, escalate the issue and work with Splunk support to resolve issues
- Certification in any one of the SIEM Solution such as IBM QRadar, Exabeam, Securonix will be an added advantage
- Certifications in a core security related discipline will be an added advantage.
Employment Type: Full Time, Permanent
Read full job descriptionPrepare for Senio roles with real interview advice
What people at Ernst & Young are saying
Senio salary at Ernst & Young
reported by
4
employees
with 4-10
years exp.
₹11
L/yr - ₹20
L/yr
41%
more
than the average Senio Salary in India
View more details
What Ernst & Young employees are saying about work life
based on 10.5k employees
Flexible timing
Monday to Friday
No travel
Day Shift
Ernst & Young Benefits
View more benefits
Compare Ernst & Young with
Deloitte
Compare
PwC
Compare
EY Global Delivery Services ( EY GDS)
Compare
Accenture
Compare
Cognizant
Compare
TCS
Compare
Amazon
Compare
Wipro
Compare
Capgemini
Compare
IBM
Compare
Compare
Microsoft Corporation
Compare
Infosys
Compare
KPMG India
Compare
Bain & Company
Compare
McKinsey & Company
Compare
BCG
Compare
ZS
Compare
Mercer
Compare
Willis Towers Watson
Compare
Similar Jobs for you
Ernst & Young Bangalore / Bengaluru Office Locations
Bangalore Office
Ernst & Young, 3rd Floor, Tower C, RMZ Infinity Municipal No. 3, Survey No 1477/2 & 10, Old Madras Road, Benniganahalli, K.R. Puram
Bangalore
Karnataka 560016
Karnataka 560016
Bengaluru Office
Ernst & Young
Tower C, 3rd Floor, RMZ Infinity
Municipal No. 3, Old Madras Road
Survey No 1477/2 & 10
Benniganahalli, K.R. Puram
560016 Bengaluru
Ernst & Young
UB City, Canberra Block
12th & 13th Floor
No. 24, Vittal Mallya Road
Bengaluru
Bengaluru
560001
560001
Associate Consultant - TAX - National - TAX - Other - TTT Development
1-3 Yrs
Pune
Associate Director - Markets - National - CBS - AWS
10-15 Yrs
Gurgaon / Gurugram
Senior Manager - TAX - National - TAX - PAS - Mobility Core - Mumbai
7-10 Yrs
New Delhi
Senior Advisor - TAX - AMI - TAX - Indirect Tax - Core - New Delhi
2-6 Yrs
New Delhi
Associate - SaT - AMI - SaT - TCF - Transaction Diligence - Mumbai
1-4 Yrs
Mumbai
Share an Interview