Vacancy expired!
About NTT DATA Services: NTT DATA Services is a recognized leader in IT and business services, including cloud, data and applications, headquartered in Texas. As part of NTT DATA, a $30 billion trusted global innovator with a combined global reach of over 80 countries, we help clients transform through business and technology consulting, industry and digital solutions, applications development and management, managed edge-to-cloud infrastructure services, BPO, systems integration and global data centers. We are committed to our clients' long-term success. Visit or LinkedIn to learn more. Splunk Cloud SIEM Module Specialist with System observability solution background (Logs, Metrics, APM, Synthetics and Security Solution & Use Cases). Day to Day job Duties: (what this person will do on a daily/weekly basis)
- Responsible for administering, designing, and maintaining the Complex Splunk Cloud SIEM system from back to front end
- Responsible for setting up new use cases and tuning current use cases.
- On-boarding log, creating dashboards, and manage alerts on Splunk Cloud
- Perform initial triage of Splunk incidents
- Engage Telecommunication CSIRT team to re-baseline the alerts, metrics, and thresholds regularly.
- Monitor the Splunk infrastructure for capacity planning and optimization
- Setting up Splunk Forwarding for new application tiers introduced into the environment
- Experience in fundamental aspects of cloud-based systems: virtualization, containerization, software-defined networking, security
- Experience in design, implementation, and support of Splunk (Indexers, Forwarders, Search-Heads Setup etc)
- Experience with Linux and Windows agents for Splunk administration with a solid understanding of the Splunk system.
- Proven track record in troubleshooting and optimization of complex systems
- Strong analytical and reasoning skills
- Good communication skills - ability to listen and understand architectural needs of a product development team
- Motivation and ability to independently research and implement solutions based on leading-edge technologies
- Ability to work in a distributed multicultural team
- Splunk Cloud 8-10 Years experience
- Splunk admin certification
- Proven record in implementation and improvement of monitoring and observability services, including actionable alerting, SLIs/SLOs/Error budgets, Observability tools such as Elasticsearch 3-5 Years Experience.