Barclays

Splunk SIEM Engineer

Barclays
Apply
15 hours ago
Chennai, IndiaSenior

Responsibilities

  • Design, develop, and improve scalable, maintainable, and secure software solutions.
  • Architect and administer multi-platform SIEM capabilities, including data models, correlation rules, and security event analysis.
  • Manage log ingestion, data routing, transformation, normalization, and parsing using tools such as Cribl.
  • Develop SOAR playbooks and automated response workflows for incident management.
  • Perform threat detection, incident response, network security troubleshooting, and security analytics.
  • Create runbooks, procedures, technical documentation, and security communications for diverse audiences.
  • Collaborate with product managers, designers, engineers, stakeholders, and related teams.
  • Participate in code reviews, unit testing, risk management, control strengthening, and continuous improvement.
  • Guide team members, coordinate resources, advise stakeholders, and contribute to technical decision-making.

Requirements

  • Bachelor's degree.
  • Proven experience with Splunk Enterprise Security, Microsoft Sentinel, SIEM architecture, data models, correlation rules, and administrative functions.
  • Strong analytical skills in threat detection, incident response, and security event analysis in large enterprise environments with 10,000 or more endpoints.
  • Hands-on experience with log ingestion, data routing, transformation, data normalization, and parsing using tools such as Cribl.
  • Experience with security orchestration platforms, playbook development, and automated incident response workflows.
  • Working knowledge of network architectures, firewalls, proxies, common attack vectors, and troubleshooting.
  • Excellent technical writing and communication skills.
  • Preferred experience with AWS or Azure security, containerized environments, SaaS security solutions, Python, PowerShell, KQL, SPL, SQL, EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms.
  • Preferred experience with Chef, Ansible, Jenkins, and GitLab CI/CD.
  • Knowledge of SOX, PCI-DSS, and GDPR, with hands-on incident response or forensics experience preferred.
  • Professional certifications such as CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja are valued.

Benefits

  • The role is based in Chennai.

Tech Stack

AnsibleAWSAzureChefGitLab CI/CDJenkinsPowerShellPythonSplunkSQL

Categories

Barclays

About Barclays

10,000+ employees

Barclays is a UK‑based universal bank that provides retail and commercial banking, credit cards (Barclaycard), wealth management, and investment banking to consumers, businesses, and institutions. Publicly listed in London and New York, it generates revenue from net interest income, fees, and markets activities, and operates across Europe, the Americas, the Middle East, and Asia. Founded in 1690 and headquartered in London, it serves customers through digital channels and a branch network.

Contact me