Splunk Admin

Capgemini; Maharashtra; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Wellness benefits

Flexible work options

Career paths within Capgemini

Job summary

Capgemini in India is seeking a Splunk Administrator to design, implement, and optimize enterprise SIEM and security monitoring. You will work with Splunk Enterprise Security and Cloud to onboard data, build dashboards, alerts, and use cases across the security stack.

You will collaborate with SOC teams to enhance detection, investigation, and response, and create technical documentation with best practices. Strong SPL, KQL, and SQL skills are expected for 4–9 years of experience.

Qualifications

• Strong hands-on experience with Splunk Enterprise Security (ES).
• Experience designing and developing complex incident detection and response use cases.
• Expertise in: Log analysis, Log normalization, Parser creation and validation, Custom log onboarding.
• Experience creating advanced search queries and security analytics use cases.
• Strong Experience working with SIEM platforms.
• Strong expertise in: Splunk Administration, Splunk Enterprise Security, Security Use Case Development, Security Monitoring.
• Excellent knowledge of: SPL, KQL, SQL-based query languages.

Responsibilities

• Design, develop, and maintain Splunk Enterprise Security (ES) use cases, alerts, dashboards, and correlation searches.
• Enhance threat detection through log analysis, content tuning, and monitoring improvements; onboard data from security tools and cloud platforms.
• Collaborate with SOC teams to improve incident detection, investigation, and response; implement automation and orchestration.
• Create technical documentation and share best practices with internal teams; work with cross-functional stakeholders to deliver SIEM solutions.

Skills

Splunk Enterprise Security

SIEM design & development

Threat detection

Log analysis

Security monitoring

SPL

KQL

SQL

SOC collaboration

Tools

Splunk ES

Splunk Enterprise Security

Splunk Admin

KQL

SQL

Job description

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired bya collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible. Join us and help the world’s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.

Your Role

We’re hiring a Splunk Administrator to support and optimize enterprise-scale SIEM and security monitoring environments! If you have expertise in Splunk Administration, Splunk Enterprise/Cloud, Log Management, SIEM, Data Onboarding, Dashboard Development, PAN India candidates with 4-9 Years of experience.

• Design, develop, and maintain Splunk Enterprise Security (ES) use cases, alerts, dashboards, and correlation searches.
• Enhance threat detection capabilities through log analysis, content tuning, and security monitoring improvements. Integrate and onboard data from security tools, cloud platforms, and enterprise applications.
• Collaborate with SOC teams to improve incident detection, investigation, and response processes. Implement automation and orchestration to streamline security operations.
• Create technical documentation and share best practices with internal teams. Work with cross-functional stakeholders to deliver effective SIEM and cybersecurity solutions.

Your Profile

• Strong hands-on experience with Splunk Enterprise Security (ES).
• Experience designing and developing complex incident detection and response use cases.
• Expertise in: Log analysis ,Log normalization, Parser creation and validation, Custom log onboarding
• Experience creating advanced search queries and security analytics use cases.
• Strong Experience working with SIEM platforms.
• Strong expertise in: Splunk Administration ,Splunk Enterprise Security, Security Use Case Development, Security Monitoring
• Excellent knowledge of: SPL (Splunk Processing Language),KQL (Kusto Query Language),SQL-based query languages

What you'll love about working here

• We offer a range of career paths and internal opportunities within Capgemini group.
• You will get comprehensive wellness benefits including health checks, telemedicine, insurance with top-ups, elder care, partner coverage or new parent support via flexible work.
• At Capgemini, you can work on cutting-edge projects in tech and engineering with industry leaders or create solutions to overcome societal and environmental challenges.

Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organizations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2024 global revenues of €22.1 billion.
Make it real | www.capgemini.com