Senior SIEM & SOAR Expert - Splunk Cloud

Title: Senior SIEM & SOAR Expert – Splunk Cloud Location: Noida/Bangalore/Remote Duration: Contract We are seeking a highly experienced SIEM & SOAR expert to lead our transition from Devo to Splunk Cloud and own the end to end SIEM lifecycle. This role requires deep expertise in Splunk infrastructure, data onboarding, parsing, noise reduction, and use case engineering, with a strong focus on security outcomes, scalability, and operational efficiency. Key Responsibilities Splunk Architecture & Operations Design, implement, and manage Splunk Cloud architecture , ensuring scalability, performance, and high availability Own Splunk infra components including data pipelines, index management, retention, and cost optimization Act as the technical authority for Splunk platform governance and best practices Data Ingestion & Normalization Lead onboarding of diverse log sources (security, infra, cloud, SaaS, endpoints, IAM, network) Build and optimize parsing, field extractions, CIM compliance , and data normalization Ensure high data quality, reliability, and consistency across sources Noise Reduction & Signal Optimization Drive alert noise compression , deduplication, and tuning strategies Optimize correlation logic to improve signal to noise ratio and SOC efficiency Continuously refine detections based on threat trends and operational feedback Use Case & Detection Engineering Design and implement high fidelity security use cases mapped to MITRE ATT&CK Build advanced correlation searches, dashboards, reports, and KPIs Partner with SOC and IR teams to operationalize detections and response workflows SOAR Integration & Automation Integrate Splunk with SOAR platforms to enable automated triage and response Design pl