Back
BlackRock logo

Associate, Cyber Observability

BlackRock · Posted Oct 28

Investment management, asset management, risk analytics, and wealth services

Gurgaon, HaryanaFull-timeHybridMid Level3–5 years₹18.0L–₹28.0L yearly100+ applicants
Investment ManagementAsset ManagementFinancial ServicesFintechPublic Company
Full time

Get a personal compatibility score

Add a resume for personal matches

About the role

The role sits within BlackRock's technology organization supporting enterprise observability and security telemetry platforms, working alongside Information Security, infrastructure, cloud, network, application, and operations teams. The team engineers and operates Splunk Enterprise, Splunk IT Service Intelligence (ITSI), Splunk Enterprise Security (ES), and Cribl to collect, process, monitor, and analyze operational and cybersecurity data. The engineer will configure and maintain these platforms, onboard and troubleshoot machine data, and help ensure reliable, secure telemetry for security monitoring and detections.

What you will do

  • Configure, administer, maintain, and troubleshoot Splunk Enterprise environments.
  • Develop and maintain Splunk ITSI services, KPIs, health scores, dashboards, alerts, and service monitoring.
  • Configure and maintain Cribl pipelines for telemetry collection, routing, filtering, parsing, enrichment, and transformation.
  • Support Splunk Enterprise Security (ES) and security monitoring capabilities.
  • Onboard telemetry from applications, operating systems, cloud platforms, network infrastructure, security technologies, and enterprise services.
  • Develop SPL searches , dashboards, alerts, reports, and other Splunk knowledge objects.
  • Support Splunk CIM normalization and data models used by security analytics.
  • Troubleshoot data ingestion, parsing, timestamping, field extraction, indexing, forwarding, and search issues.
  • Monitor Splunk and Cribl platform health, capacity, data availability, and performance.
  • Support telemetry integrations using syslog, REST APIs, HTTP Event Collector (HEC), Universal Forwarders , and other collection methods.
  • Assist with Splunk, ITSI, and Cribl installations, upgrades, configuration changes, and platform maintenance.
  • Work with Security Operations and Detection Engineering teams to ensure appropriate telemetry is available for security monitoring, investigations, and detections.
  • Assist with automation of platform administration, deployment, configuration, and monitoring activities.
  • Maintain technical documentation, operational procedures, onboarding documentation, and engineering runbooks.
  • Participate in troubleshooting and incident-response activities involving security telemetry and observability platforms.
  • Collaborate with technology teams to improve the reliability, quality, and usability of enterprise telemetry.

Skills used in this role

What the employer is looking for

  • Hands-on experience with Splunk Enterprise administration or engineering.
  • Experience with Splunk ITSI or enterprise monitoring/observability technologies.
  • Experience with Cribl Stream or similar telemetry pipeline technologies.
  • Working knowledge of SPL .
  • Experience onboarding and troubleshooting machine data.
  • Understanding of parsing, field extraction, timestamps, metadata, indexing, and data routing.
  • Familiarity with dashboards, alerts, reports, and Splunk knowledge objects.
  • Understanding of SIEM and cybersecurity logging principles .
  • Familiarity with Linux/Unix, networking, syslog, REST APIs, certificates, and enterprise infrastructure.
  • Strong analytical and troubleshooting skills.
  • Ability to collaborate across security and technology teams.

Preferred qualifications

  • Splunk Enterprise Security experience
  • Splunk ITSI experience
  • Cribl Stream experience
  • Splunk or Cribl certifications
  • AWS and/or Azure logging experience
  • Splunk CIM and data model experience
  • Python or shell scripting experience
  • Git/source-control experience
  • Exposure to detection engineering and security operations
  • Experience with distributed or clustered Splunk environments

Benefits and support

  • strong retirement plan
  • tuition reimbursement
  • comprehensive healthcare
  • support for working parents
  • Flexible Time Off (FTO)

About BlackRock

BlackRock, Inc. is an American multinational investment management corporation and the world's largest asset manager. The firm provides institutional and individual clients with a broad range of investment, advisory, and risk management products, including its proprietary Aladdin financial technology platform. Headquartered in New York City, BlackRock manages trillions in assets across global equity, fixed income, alternative investments, and iShares exchange-traded funds (ETFs).

Industry
Investment Management
Company size
24900 employees
Founded
1988-03-09
Location
New York, New York, USA
Funding stage
Public Company

Leadership

LF
Larry Fink

Chairman and Chief Executive Officer

RK
Rob Kapito

President and Director

MS
Martin Small

Chief Financial Officer and Global Head of Corporate Strategy

RG
Rob Goldstein

Chief Operating Officer

Apply