Job Description
USI Cyber Engineer – Analyst/Senior Analyst
Are you passionate about technology and interested in joining a community of collaborative colleagues who respectfully and courageously seek to challenge the status quo? If so, read on to learn more
about an exciting opportunity with Deloitte’s Information Technology Services (ITS). We are insatiably
curious and life-long learners focused on technology and innovation.
Work you’ll do
The Cybersecurity Engineer position supports the Fusion Center as an escalation point identifying and addressing potential Splunk content/level I and II engineering security concerns as this role serves as a point of escalation. This role is also responsible for supporting Security application(s) patching, content creation as requested from all stakeholders, and development of process documentation.
Provide knowledge of recognizing and onboarding new data sources into Splunk, analyzing the data for parsing purposes to make it CIM compliant, then building dashboards to fulfill stakeholder requirements.
Provide skillful knowledge within a Linux environment, editing and maintaining Splunk configuration files and apps.
Work with other Cybersecurity Engineering team members and interact with end users to gather requirements, perform troubleshooting, and aid with the creation of Splunk search queries and dashboards as required.
interact with senior management, as necessary.
Troubleshoot performance alerts from the Splunk infrastructure or Splunk agents
Assist in the testing of vendor patches for all security applications the Engineering team supports.
Maintain the Cybersecurity Engineering group in ServiceNow and ensure all request and
incident SLA’s are met as required by our stakeholders.
Document and update the Team’s process and Data Ingestion procedures.
Actively seek to improve and develop new content based upon observed security activity
Provide excellent customer service
Qualifications
Required:
Bachelor’s degree in Computer Science or Business Administration, or relevant educational or
professional experience.
5 years of related experience including 2 to 3 years in Splunk Administration.
Strong Working Knowledge of the Splunk Platform.
Ability to troubleshoot performance and issues, as well as installation and Splunk upgrades
Strong experience in analyzing, troubleshooting and providing solutions for technical issues.
Experience with Splunk Enterprise Security.
Experience in Syslog, Splunk HTTP Event collection (HEC).
Experience in ingesting logs from DB Connect app.
Creating Alerts, Dashboards and reports in Splunk Tool.
Experience in requirement gathering and documentation.
Experience in Log parsing, lookups, calculated fields extractions using regular expression(regex).
Experience in Developing Splunk Dashboards, Report, Alerts, Visualizations and Optimize searches.
Hands-on Experience in Splunk Content Development.
Sound judgment skills and ability to manage escalations.
Determines methods and procedures on new assignments with minimal instruction,
Excellent interpersonal and organizational skills.
Preferred:
Splunk Core User Certification
Splunk Core Power User Certification
Splunk Admin Certification
Experience with Data Models
Experience with writing correlated searches
Writing Scripts and configure in Splunk Servers.
Understanding of all Splunk backend components
Experience with Splunk integration to AWS, Azure, and GCP
Knowledge and experience in GIT.
Knowledge of risk assessment tools, technologies and methods
#CA-LY
Recruiting tips
Finding the right job and preparing for the recruitment process can be tricky. Check out tips from our Deloitte recruiting professionals to set yourself up for success. Check out recruiting tips from Deloitte recruiters.
Benefits
We believe that to be an undisputed leader in professional services, we should equip you with the resources that can make a positive impact on your well-being journey. Our vision is to create a leadership culture focused on the development and well-being of our people. Here are some of our benefits and programs to support you and your family’s well-being needs. Learn more about what working at Deloitte can mean for you.
Our people and culture
Our people and our culture make Deloitte a place where leaders thrive. Get an inside look at the rich diversity of background, education, and experiences of our people. What impact will you make? Be inspired by the stories of our people.
Our purpose
Deloitte’s purpose is to make an impact that matters for our clients, our people, and in our communities. We are creating trust and confidence in a more equitable society. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. We are focusing our collective efforts to advance sustainability, equity, and trust that come to life through our core commitments. Learn more about Deloitte's purpose, commitments, and impact.
Professional development
You want to make an impact. And we want you to make it. We can help you do that by providing you the culture, training, resources, and opportunities to help you grow and succeed as a professional. Learn more about our commitment to developing our people.
Requisition code: 14+303
Are you passionate about technology and interested in joining a community of collaborative colleagues who respectfully and courageously seek to challenge the status quo? If so, read on to learn more
about an exciting opportunity with Deloitte’s Information Technology Services (ITS). We are insatiably
curious and life-long learners focused on technology and innovation.
Work you’ll do
The Cybersecurity Engineer position supports the Fusion Center as an escalation point identifying and addressing potential Splunk content/level I and II engineering security concerns as this role serves as a point of escalation. This role is also responsible for supporting Security application(s) patching, content creation as requested from all stakeholders, and development of process documentation.
Provide knowledge of recognizing and onboarding new data sources into Splunk, analyzing the data for parsing purposes to make it CIM compliant, then building dashboards to fulfill stakeholder requirements.
Provide skillful knowledge within a Linux environment, editing and maintaining Splunk configuration files and apps.
Work with other Cybersecurity Engineering team members and interact with end users to gather requirements, perform troubleshooting, and aid with the creation of Splunk search queries and dashboards as required.
interact with senior management, as necessary.
Troubleshoot performance alerts from the Splunk infrastructure or Splunk agents
Assist in the testing of vendor patches for all security applications the Engineering team supports.
Maintain the Cybersecurity Engineering group in ServiceNow and ensure all request and
incident SLA’s are met as required by our stakeholders.
Document and update the Team’s process and Data Ingestion procedures.
Actively seek to improve and develop new content based upon observed security activity
Provide excellent customer service
Qualifications
Required:
Bachelor’s degree in Computer Science or Business Administration, or relevant educational or
professional experience.
5 years of related experience including 2 to 3 years in Splunk Administration.
Strong Working Knowledge of the Splunk Platform.
Ability to troubleshoot performance and issues, as well as installation and Splunk upgrades
Strong experience in analyzing, troubleshooting and providing solutions for technical issues.
Experience with Splunk Enterprise Security.
Experience in Syslog, Splunk HTTP Event collection (HEC).
Experience in ingesting logs from DB Connect app.
Creating Alerts, Dashboards and reports in Splunk Tool.
Experience in requirement gathering and documentation.
Experience in Log parsing, lookups, calculated fields extractions using regular expression(regex).
Experience in Developing Splunk Dashboards, Report, Alerts, Visualizations and Optimize searches.
Hands-on Experience in Splunk Content Development.
Sound judgment skills and ability to manage escalations.
Determines methods and procedures on new assignments with minimal instruction,
Excellent interpersonal and organizational skills.
Preferred:
Splunk Core User Certification
Splunk Core Power User Certification
Splunk Admin Certification
Experience with Data Models
Experience with writing correlated searches
Writing Scripts and configure in Splunk Servers.
Understanding of all Splunk backend components
Experience with Splunk integration to AWS, Azure, and GCP
Knowledge and experience in GIT.
Knowledge of risk assessment tools, technologies and methods
#CA-LY
Recruiting tips
Finding the right job and preparing for the recruitment process can be tricky. Check out tips from our Deloitte recruiting professionals to set yourself up for success. Check out recruiting tips from Deloitte recruiters.
Benefits
We believe that to be an undisputed leader in professional services, we should equip you with the resources that can make a positive impact on your well-being journey. Our vision is to create a leadership culture focused on the development and well-being of our people. Here are some of our benefits and programs to support you and your family’s well-being needs. Learn more about what working at Deloitte can mean for you.
Our people and culture
Our people and our culture make Deloitte a place where leaders thrive. Get an inside look at the rich diversity of background, education, and experiences of our people. What impact will you make? Be inspired by the stories of our people.
Our purpose
Deloitte’s purpose is to make an impact that matters for our clients, our people, and in our communities. We are creating trust and confidence in a more equitable society. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. We are focusing our collective efforts to advance sustainability, equity, and trust that come to life through our core commitments. Learn more about Deloitte's purpose, commitments, and impact.
Professional development
You want to make an impact. And we want you to make it. We can help you do that by providing you the culture, training, resources, and opportunities to help you grow and succeed as a professional. Learn more about our commitment to developing our people.
Requisition code: 14+303
💡 Quick Summary
Seeking a career-building opportunity? The USI|EH24|DTTL|GCS |Senior Analyst|Splunk Developer position is now open for candidates interested in the Software Developer Jobs sector. This role in Hyderabad offers a professional environment and growth potential.
Requirement Snapshot: Candidates should possess basic communication skills, a proactive attitude, and the ability to work in a team. Experience in Software Developer Jobs is a plus.