Splunk Performance & Content Engineer
Unisys (company site, opens in a new tab)8+ yrsBengaluruOn-siteDirect career pageEst. 20–32 LPA
Posted 3d ago
Reach people at Unisys
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at Unisys you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Optimize and tune Splunk search performance across 1,117 scheduled searches including SPL tuning, data model acceleration, and summary indexing.
- Design, maintain and manage Splunk content such as dashboards, alerts, detection rules, and CIM-compliant data models, including content packaging and lifecycle management via version control and CI/CD.
- Monitor system health and performance metrics, report findings regularly, and manage backlog prioritization and transitions with cross-team collaboration and documentation maintenance.
Minimum Requirements
- Bachelor's degree and 8+ years of relevant experience OR equivalent combination of education and experience.
- Over 7 years of advanced SPL experience including data models, accelerated searches, and summary indexing.
- Experience with search scheduler performance analysis and data onboarding/normalization including props, transforms, CIM mapping.
- Ability to work overlapping Pacific Time zone; clear written and spoken English.
Ideal Candidate Profile
- Experienced in tuning ITSI services, KPIs, and episodes with exposure to Splunk Enterprise Security, ITSI, or Observability Cloud.
- Familiarity with detection engineering practices and frameworks like MITRE ATT&CK, including reducing false positives through content tuning.
- Comfortable working in a Kanban or sprint backlog model and collaborating with SOC, SRE, and application teams for operational content requirements.