# Splunk SIEM Specialist Engineer **Company**: Thomson Reuters **Work arrangement**: hybrid **Experience**: senior **Job type**: full-time **Category**: Engineering **Industry**: Technology **Apply**: https://thomsonreuters.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/India-Bengaluru-Karnataka/SIEM-Engineer_JREQ202801?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_12d26157-673 ## Description The Information Security and Risk Management (ISRM) organization at Thomson Reuters is seeking a Splunk SIEM Specialist Engineer to join the growing SIEM & Security Analytics team. The successful candidate will be responsible for managing a large hybrid enterprise/cloud deployment of Splunk and Enterprise Security. They will partner with the SOC, CIRT, Threat Detection, and Cyber Intel functions to deliver capabilities that improve their ability to defend Thomson Reuters from cyber threats. **Key Responsibilities:** - Monitor and maintain the stability of Splunk and Enterprise Security SIEM platform - Create and optimize Splunk queries, dashboards, and reports to support business and operational needs - Troubleshoot and perform performance tuning for the Splunk environment - Optimize Splunk by troubleshooting ingestion delays, parsing errors, and search performance issues - Manage Splunk infrastructure in AWS cloud - Onboard new application and platform logs via syslog, endpoint agents, APIs, Cribl, HEC, DB Connect, etc. - Experience in managing Cribl Stream Deployments and creating Cribl Pipelines - Collaborate with SOC, CIRT, Threat Detection, and Cyber Intel teams on operationalizing use cases within Splunk ES to detect threats - Create and maintain documentation to support the SIEM platform - Embed automation into the deployment and management of the Splunk and Cribl infrastructure and application - Implement industry best practices for managing an enterprise-scale service and continuously seek iterative improvements - Facilitate high availability and disaster recovery capabilities **Required Qualifications:** - Bachelor’s degree in Computer Science, Information Technology, or Computer Applications - 5+ years of proven experience working with large hybrid deployments of Splunk, Splunk Cloud, and Cribl - Strong knowledge of Splunk and Cribl architecture and components - Proficiency in advanced SPL and dashboard creation - Experience with Splunk Enterprise Security - Experience integrating various data sources, especially cloud - Solid understanding of network transport protocols and services (TCP/IP, syslog, DNS, ODBC, SFTP, SSH, PKI, etc.) - General scripting proficiency (BASH, Python, regular expressions, PowerShell, etc.) - Experience researching, analyzing, and resolving complex problems with minimal supervision - Attention to detail and accuracy - Experience managing multiple projects in parallel and meeting deadlines - Excellent written and verbal communication skills **Preferred Qualifications:** - Splunk certifications (Splunk Certified Admin, Splunk Cloud Admin, Splunk Certified Architect, or Splunk Enterprise Security Certified Admin) - Cribl User or Admin certification - Experience deploying, managing, and scaling cloud infrastructure in AWS or Azure - Experience with DevOps technologies such as Jenkins, Code Pipeline, CloudFormation, Terraform, Ansible, etc. - Linux, Networking, or Security certifications a plus - Experience working in agile project methodology - Experience using Claude/ChatGPT/CoPilot AI tools to automate BAU work and troubleshooting **What’s in it For You?** - Hybrid work model with flexible working environment - Flexibility and work-life balance with supportive workplace policies - Career development and growth opportunities - Industry-competitive benefits, including comprehensive benefit plans, flexible vacation, and retirement savings - Culture of inclusion and belonging, flexibility, work-life balance, and more - Opportunities to make a social impact with the Social Impact Institute ## Skills ### Required - Splunk - Cribl - AWS - Cloud Operations - SPL - Dashboard Creation - Splunk Enterprise Security - Network Transport Protocols - Scripting - Problem-Solving - Communication ### Nice to have - Splunk Certifications - Cribl Certification - DevOps Technologies - Cloud Infrastructure - Agile Project Methodology - AI Tools --- Source: [Apply at thomsonreuters.wd5.myworkdayjobs.com](https://thomsonreuters.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/India-Bengaluru-Karnataka/SIEM-Engineer_JREQ202801?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)