Security Remote Field Service Engineer (L2)

Overview

NTT DATA is hiring a SIEM & Splunk Administrator to support Security Operations Center (SOC) functions for a Banking & Data Centre project in Kolkata.

What you'll do

• Perform daily health checks of Splunk Services, Indexers, Search Heads, and Universal Forwarders.
• Monitor and validate log ingestion from security devices, servers, applications, databases, and network infrastructure.
• Review Splunk license utilization and ensure platform capacity management.
• Monitor forwarder connectivity and troubleshoot data collection issues.
• Review audit logs and validate scheduled searches, alerts, and correlation rules.
• Monitor disk utilization, index health, and platform performance.
• Investigate and resolve Splunk internal errors, search failures, and performance issues.
• Perform daily/weekly backup and restoration validation of Splunk configurations.
• Support SOC operations, threat monitoring, incident investigation, and compliance requirements.
• Maintain operational documentation and security reports.

What you'll need

• Regular B.E./B.Tech in Computer Science, Information Technology, Electronics, or related Engineering discipline.
• Minimum 5 years of hands-on experience in Splunk Administration, SIEM Operations, or SOC environments.
• Strong knowledge of Splunk Enterprise, Enterprise Security (ES), Universal Forwarders, Indexers, Search Heads, and Distributed Architecture.
• Experience with Linux/Unix administration, log management, cybersecurity monitoring, and incident response processes.

Nice to have

• Exposure to Banking, BFSI, Data Centre, SOC, or Critical Infrastructure environments.
• Splunk Enterprise Certified Admin
• Splunk Enterprise Security Certified Admin
• Splunk Core Certified Power User
• CompTIA Security+
• EC-Council Certified SOC Analyst (CSA)
• CEH (Certified Ethical Hacker) or CISSP

Details

• Location: Kolkata (Work from Office)
• Workplace type: On-site