Security Remote Field Service Engineer (L2)

About the role

We are hiring a SIEM & Splunk Administrator to support Security Operations Center (SOC) functions for a Banking & Data Centre project. The role involves administration, monitoring, troubleshooting, and optimization of the Splunk platform to ensure continuous log collection, security event monitoring, compliance, and operational availability.

What you'll do

• Perform daily health checks of Splunk Services, Indexers, Search Heads, and Universal Forwarders
• Monitor and validate log ingestion from security devices, servers, applications, databases, and network infrastructure
• Review Splunk license utilization and ensure platform capacity management
• Monitor forwarder connectivity and troubleshoot data collection issues
• Review audit logs and validate scheduled searches, alerts, and correlation rules

What you need

• 5–9 years in electrical & electronics
• Splunk
• SIEM
• Linux
• Incident response
• Troubleshooting
• B.Tech or B.E.

Good to have

• CEH
• CISSP