Job Description

Line of Service Internal Firm Services
Industry/Sector Not Applicable
Specialism Operations
Management Level Associate
& Summary At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.
Those in application security at PwC will be responsible for providing security services to development teams including code scanning, readiness testing, and penetration testing to enable application teams to build and deploy secure applications in Production. You will utilise a risk-based methodology and "shift-left" approach to engage early in the software development lifecycle.
*Why PWC
At PwC, you will be part of a vibrant community of solvers that leads with trust and creates distinctive outcomes for our clients and communities. This purpose-led and values-driven work, powered by technology in an environment that drives innovation, will enable you to make a tangible impact in the real world. We reward your contributions, support your wellbeing, and offer inclusive benefits, flexibility programmes and mentorship that will help you thrive in work and life. Together, we grow, learn, care, collaborate, and create a future of infinite experiences for each other. Learn more .
At PwC, we believe in providing equal employment opportunities, without any discrimination on the grounds of gender, ethnic background, age, disability, marital status, sexual orientation, pregnancy, gender identity or expression, religion or other beliefs, perceived differences and status protected by law. We strive to create an environment where each one of our people can bring their true selves and contribute to their personal growth and the firm's growth. To enable this, we have zero tolerance for any discrimination and harassment based on the above considerations.
& Summary:
Join our "Global Cyber Logging - Platform Operation" team as a pivotal player in managing the centralized data management and analytics platform using Splunk. Your role is crucial in ensuring the integrity, security, and performance of our logging infrastructure, while driving continual improvement and innovation. Applicants should have at least 1 year experience in Splunk Enterprise / SIEM administration & management, and a good understanding of networking & Linux.
Responsibilities:
SIEM Platform Management & Administration:
o Monitoring, administration, and optimization of the Splunk Enterprise platform to ensure efficient
log management and effective security information and event management (SIEM).
o Conduct regular Splunk Infra & Ingestion health checks and monitoring to keep the environment
robust and healthy for our stakeholders.
o Monitor & Keep the Splunk Enterprise instances in good health to serve our customers by keeping platform up & running 24/7.
Troubleshooting & Problem Solving:
o Actively identify issues using "Monitoring", investigate the rootcause, troubleshoot and fix the Splunk
platform issues & problems related to log source outages, parsing errors, time discrepancies, user
problems and more.
o Conduct Root Cause Analysis (RCA) to systematically address recurring issues and streamline
problem mitigation.
SIEM Configuration Management & End-user Support:
o Support the deployment and configuration of Splunk solutions at enterprise level, ensuring seamless
log integration and issue resolution.
o Manage end-user service requests, oversee Splunk access control, and enforce access restrictions to
maintain secure and efficient user management.
o Ensure optimal platform performance through regular consolidation, cleanup, and configuration
adjustments.
Innovation, Analytics, & Continuous Improvement:
o Enhance Splunk operations by implementing innovative solutions that improve efficiencies and automate processes, while integrating emerging technologies to optimize performance. Leverage machine learning and AI to deliver advanced analytics insights, predictive models, and strategic data-driven visualizations for informed decision-making. Migration & Collaborations: o Handle SIEM server offboarding and migration, managing Cloud/On-prem Splunk forwarders (UF/HF) and log source migration projects. o Foster collaboration with multiple global teams like cybersecurity, IT, and business units, while streamlining processes and documentation to boost efficiency & platform stability.
Mandatory skill sets:

• Splunk admin, splunk developer, SIEM

Preferred skill sets:
Linux, splunk
SIEM & Data Analytics Expertise: Demonstrated knowledge in SIEM solutions and data analytics tools, particularly SPLUNK. o Networking Fundamentals: Good understanding of networking principles, traffic analysis, and operating systems (Windows & Unix/Linux). TCP/IP and DNS resolution. Proficient with traffic analysis & Tshoot tools - Wireshark, TCPdump, Name lookup...etc o Linux/UNIX Proficiency: Competence in Linux/UNIX environments, including scripting skills with Regular Expressions. o SIEM Practical Experience: Hands-on experience in deploying and operating Splunk / other SIEM solutions is crucial. Splunk certifications are highly desirable. o Security Domain Knowledge: Understanding of security domain applications and their integration within SIEM frameworks to support robust cybersecurity operations. o Communication: Strong written and verbal communication skills in English.
Years of experience required:
1+ yrs
Education qualification:
Any Ug/Pg
Education (if blank, degree and/or field of study not specified) Degrees/Field of Study required: Bachelor of Technology, Master of Engineering
Degrees/Field of Study preferred:
Certifications (if blank, certifications not specified)
Required Skills Firewalls, Linux, Networking Support, Splunk (Inactive)
Optional Skills Splunk Administration
Desired Languages (If blank, desired languages not specified)
Travel Requirements Not Specified
Available for Work Visa Sponsorship? No
Government Clearance Required? No
Job Posting End Date

Skills Required