Back
BlackRock logo

Vice President. Cyber Observability

BlackRock · Posted Oct 28

Investment management, asset management, risk analytics, and wealth services

Gurgaon, HaryanaFull-timeHybridLead/Staff8–12 years₹35.0L–₹55.0L yearly52 applicants
Investment ManagementAsset ManagementFinancial ServicesFintechPublic Company
Full time

Get a personal compatibility score

Add a resume for personal matches

About the role

BlackRock's Information Security organization builds and operates cybersecurity capabilities supporting enterprise security monitoring, threat detection, incident response, and security analytics. The team works across Security Operations, Detection Engineering, Incident Response, Cyber Engineering, and infrastructure groups on Splunk-based telemetry collection, normalization, and detection. This role engineers and operates Splunk Enterprise and Splunk Enterprise Security, onboarding security data and building detections, dashboards, and analytics for SOC and threat-hunting use.

What you will do

  • Engineer, administer, and optimize Splunk Enterprise and Splunk Enterprise Security (ES) .
  • Develop and maintain security detections, correlation searches, alerts, dashboards, reports, and investigative workflows.
  • Onboard security telemetry from endpoints, networks, firewalls, identity platforms, cloud environments, applications, and other cybersecurity technologies.
  • Develop and maintain Splunk Common Information Model (CIM) compliant data sources and associated data models.
  • Perform data parsing, field extraction, normalization, enrichment, filtering, and routing.
  • Partner with SOC and Detection Engineering teams to translate security requirements and threat scenarios into Splunk detections and analytics.
  • Support incident response and threat-hunting activities through advanced SPL searches and security data analysis.
  • Tune detections to improve fidelity and reduce unnecessary alert volume.
  • Troubleshoot data ingestion, indexing, search performance, and Splunk ES issues.
  • Monitor Splunk platform health, capacity, indexing performance, search performance, and data availability.
  • Support distributed Splunk architectures, including search heads, indexers, forwarders, deployment components, and clustered environments.
  • Integrate Splunk with enterprise security technologies and cloud platforms using APIs, syslog, agents, Universal Forwarders, and other collection mechanisms.
  • Maintain appropriate Splunk RBAC, application permissions, and security controls.
  • Create technical documentation, operational procedures, data onboarding standards, and engineering runbooks.
  • Collaborate across Information Security and Technology teams to deliver secure and scalable logging and monitoring solutions.

Skills used in this role

What the employer is looking for

  • Hands-on experience with Splunk Enterprise and Splunk Enterprise Security .
  • Strong SPL development and troubleshooting skills.
  • Understanding of SIEM, security monitoring, detection engineering, and incident-response principles.
  • Experience onboarding and normalizing security telemetry.
  • Knowledge of Splunk CIM and data models.
  • Experience creating alerts, dashboards, reports, and security analytics.
  • Understanding of large-scale Splunk architecture and data ingestion.
  • Strong troubleshooting and analytical skills.
  • Ability to work effectively across cybersecurity and infrastructure engineering teams.

Benefits and support

  • strong retirement plan
  • tuition reimbursement
  • comprehensive healthcare
  • support for working parents
  • Flexible Time Off (FTO)

About BlackRock

BlackRock, Inc. is an American multinational investment management corporation and the world's largest asset manager. The firm provides institutional and individual clients with a broad range of investment, advisory, and risk management products, including its proprietary Aladdin financial technology platform. Headquartered in New York City, BlackRock manages trillions in assets across global equity, fixed income, alternative investments, and iShares exchange-traded funds (ETFs).

Industry
Investment Management
Company size
24900 employees
Founded
1988-03-09
Location
New York, New York, USA
Funding stage
Public Company

Leadership

LF
Larry Fink

Chairman and Chief Executive Officer

RK
Rob Kapito

President and Director

MS
Martin Small

Chief Financial Officer and Global Head of Corporate Strategy

RG
Rob Goldstein

Chief Operating Officer

Apply