IT Security with Splunk

The It Mind Services; Hyderabad; Hybrid; INR 1,200,000 - 1,600,000; Full time

Job summary

The It Mind Services seeks an IT Security Splunk specialist in Hyderabad with 6-8 years of hands-on experience. This role focuses on Splunk Enterprise and Splunk ES, developing correlation searches, notable events, risk-based alerts, and dashboards.

You will employ SPL to craft complex, readable rules, conduct log onboarding, CIM normalization, and data modeling. Proficiency in Python, PowerShell, and Bash, plus cloud familiarity (AWS/Azure/GCP), is preferred.

Qualifications

• 6–8 years of experience in IT security engineering.
• Hands-on with Splunk Enterprise and Splunk ES.
• Developing correlation searches, notable events, risk-based alerting, and dashboards.
• Proficiency in SPL to build complex, human-readable detection rules.
• Experience with log onboarding, field extractions, CIM normalization, and data modeling.
• Knowledge of SIEM, SOC, Threat Detection & Response, and Incident Response.
• Familiarity with MITRE ATT&CK, Cyber Kill Chain, and Threat Hunting.
• Proficiency in Python, PowerShell, and Bash scripting.

Skills

Splunk Enterprise

Splunk ES

Correlation Searches

Notable Events

Dashboards

SPL

Log Onboarding

CIM Normalization

Data Modeling

Python

PowerShell

Shell Scripting

REST APIs

SOAR Platforms

Cloud (AWS/Azure/GCP)

Windows Server

Linux Administration

Active Directory / Entra ID

Education

B.Tech / BE

Job description

IT Secruity Splunk

Technical Skills and Tools

• Be\\Btech with 6 to 8 years of experience
• Strong experience with Splunk Enterprise and Splunk Enterprise Security (ES).
• Hands-on expertise developing correlation searches, notable events, risk-based alerting, and dashboards.
• Proficiency in Splunk's query language is required to build complex, human-readable detection rules
• Experience with log onboarding, field extractions, parsing, CIM normalization, and data modeling.
• Strong understanding of:
• SIEM technologies
• Security Operations (SOC)
• Threat Detection & Response
• Incident Response
• Threat Hunting
• Cyber Kill Chain
• MITRE ATT&CK Framework
• Python
• PowerShell
• Bash/Shell Scripting
• REST APIs
• SOAR Platforms
• AWS, Azure, or Google Cloud Platform
• Windows Server Administration
• Linux Administration
• Active Directory and Azure AD / Entra ID