Splunk Admin

Capgemini; Thane; Sur place; INR 1 200 000 - 1 800 000; Plein temps

Avantages offerts par ce poste

Health checks

Telemedicine

Insurance top-ups

Elder care

New parent support

Flexible work

Résumé du poste

Capgemini is hiring a Splunk Administrator to support and optimize enterprise-scale SIEM environments across PAN India. You will design and maintain Splunk ES use cases, alerts, dashboards, and correlation searches while enhancing threat detection through log analysis and content tuning.

You will onboard data from security tools and cloud platforms, collaborate with SOC teams, and implement automation to streamline security operations.

Qualifications

• Strong hands-on experience with Splunk Enterprise Security (ES).
• Experience designing and developing complex incident detection and response use cases.
• Expertise in log analysis, log normalization, parser creation and validation, and custom log onboarding.
• Experience creating advanced search queries and security analytics use cases.
• Strong experience with SIEM platforms and Splunk Administration.
• Excellent knowledge of SPL, KQL, and SQL-based query languages.

Responsabilités

• Design, develop, and maintain Splunk ES use cases, alerts, dashboards, and correlation searches.
• Enhance threat detection through log analysis, content tuning, and security monitoring improvements.
• Integrate and onboard data from security tools, cloud platforms, and enterprise applications.
• Collaborate with SOC teams to improve incident detection, investigation, and response processes.
• Implement automation and orchestration to streamline security operations.
• Create technical documentation and share best practices with internal teams.
• Work with cross-functional stakeholders to deliver effective SIEM and cybersecurity solutions.

Connaissances

Splunk Administration

Splunk Enterprise Security (ES)

Security Use Case Development

Log Analysis

Content Tuning

Incident Detection & Response

Dashboard Development

Automation & Orchestration

SPL

KQL

SQL-based queries

Outils

Splunk Enterprise Security (ES)

Splunk

SIEM Platforms

Security Automation

Description du poste

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired by a collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible. Join us and help the world’s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.Your RoleWe’re hiring a Splunk Administrator to support and optimize enterprise-scale SIEM and security monitoring environments! If you have expertise in Splunk Administration, Splunk Enterprise/Cloud, Log Management, SIEM, Data Onboarding, Dashboard Development apply now for PAN India candidates with 4-9 Years of experience.Design, develop, and maintain Splunk Enterprise Security (ES) use cases, alerts, dashboards, and correlation searches.Enhance threat detection capabilities through log analysis, content tuning, and security monitoring improvements.Integrate and onboard data from security tools, cloud platforms, and enterprise applications.Collaborate with SOC teams to improve incident detection, investigation, and response processes.Implement automation and orchestration to streamline security operations.Create technical documentation and share best practices with internal teams.Work with cross-functional stakeholders to deliver effective SIEM and cybersecurity solutions.Your ProfileStrong hands-on experience with Splunk Enterprise Security (ES).Experience designing and developing complex incident detection and response use cases.Expertise in: Log analysis ,Log normalization, Parser creation and validation, Custom log onboardingExperience creating advanced search queries and security analytics use cases.Strong Experience working with SIEM platforms.Strong expertise in: Splunk Administration ,Splunk Enterprise Security, Security Use Case Development, Security MonitoringExcellent knowledge of: SPL (Splunk Processing Language),KQL (Kusto Query Language),SQL-based query languagesWhat you'll love about working hereWe offer a range of career paths and internal opportunities within Capgemini group.You will get comprehensive wellness benefits including health checks, telemedicine, insurance with top-ups, elder care, partner coverage or new parent support via flexible work.At Capgemini, you can work on cutting-edge projects in tech and engineering with industry leaders or create solutions to overcome societal and environmental challenges.Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organizations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2024 global revenues of €22.1 billion.Make it real | www.capgemini.com