Splunk Admin

Capgemini; Navi Mumbai; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Capgemini is seeking a Splunk Administrator to optimize enterprise-scale SIEM and security monitoring environments. You will design and maintain Splunk ES use cases, alerts, dashboards, and correlation searches to enhance threat detection across the organization.

You will collaborate with SOC teams to improve incident detection, investigation, and response processes, implementing automation to streamline security operations.

Qualifications

• Hands-on experience with Splunk Enterprise Security (ES) and SIEM environments.
• Ability to design and develop complex incident detection use cases.
• Expertise in log analysis, normalization, parser creation and validation.
• Experience creating advanced search queries and security analytics use cases.
• Strong experience working with SIEM platforms and Splunk administration.

Responsibilities

• Design, develop, and maintain Splunk Enterprise Security use cases, alerts, dashboards, and correlation searches.
• Enhance threat detection through log analysis, content tuning, and security monitoring improvements; onboard data from security tools, cloud platforms, and apps.
• Collaborate with SOC teams to improve incident detection, investigation, and response; implement automation and orchestration to streamline security operations.
• Create technical documentation and share best practices with internal teams; work with stakeholders to deliver effective SIEM and cybersecurity solutions.

Skills

Splunk ES

Incident detection use cases

Security analytics

Log analysis

SPL

KQL

Tools

Splunk Enterprise Security

Security Use Case Development

Security Monitoring

Data onboarding

Job description

Job Summary

We're hiring a Splunk Administrator to support and optimize enterprise-scale SIEM and security monitoring environments!

Responsibilities

• Design, develop, and maintain Splunk Enterprise Security (ES) use cases, alerts, dashboards, and correlation searches.
• Enhance threat detection capabilities through log analysis, content tuning, and security monitoring improvements. Integrate and onboard data from security tools, cloud platforms, and enterprise applications.
• Collaborate with SOC teams to improve incident detection, investigation, and response processes. Implement automation and orchestration to streamline security operations.
• Create technical documentation and share best practices with internal teams. Work with cross-functional stakeholders to deliver effective SIEM and cybersecurity solutions.

Your Profile

• Strong hands-on experience with Splunk Enterprise Security (ES).
• Experience designing and developing complex incident detection and response use cases.
• Expertise in: Log analysis,Log normalization, Parser creation and validation, Custom log onboarding
• Experience creating advanced search queries and security analytics use cases.
• Strong Experience working with SIEM platforms.
• Strong expertise in: Splunk Administration, Splunk Enterprise Security, Security Use Case Development, Security Monitoring
• Excellent knowledge of: SPL (Splunk Processing Language),KQL (Kusto Query Language),SQL-based query languages

What you'll love about working here

• At Capgemini, you can work on cutting-edge projects in tech and engineering with industry leaders or create solutions to overcome societal and environmental challenges.