Splunk content developer

Tata Consultancy Services; Dadri, Hyderabad, Bengaluru; On-site; INR 1,500,000 - 2,200,000; Full time

Job summary

Tata Consultancy Services in Dadri, India is seeking an experienced Splunk Engineer to design and develop detections within Splunk Enterprise Security. You will build and optimize data models, map logs to CIM-compliant structures, and perform platform administration to ensure high performance and accuracy.

The role emphasizes converting SPL into efficient tstats queries, validating detections, and maintaining CIM mappings while ensuring LDAP/AD integrations function smoothly in enterprise

Qualifications

• Experience with Splunk enterprise security is a must.
• LDAP / Active Directory integration and troubleshooting.
• Map logs to CIM-compliant data models and fix field mapping issues.

Responsibilities

• Design and develop detections (correlation searches) in Splunk Enterprise Security.
• Build and maintain Splunk Data Models and ensure proper acceleration.
• Convert raw/index-based SPL searches into optimized tstats (datamodel) queries.
• Validate and optimize detections for performance and accuracy.
• Splunk Platform Administration.

Skills

Splunk

SPL queries

Data models

CIM mapping

LDAP/AD

Platform admin

Tools

Splunk ES

Job description

Role & responsibilities

• Design and develop detections (correlation searches) in Splunk Enterprise Security
• Build and maintain Splunk Data Models and ensure proper acceleration
• Map logs to CIM-compliant data models and fix field mapping issues
• Convert raw/index-based SPL searches into optimized tstats (datamodel) queries
• Validate and optimize detections for performance and accuracy
• Splunk Platform Administration
• Experience with Splunk enterprise security is must.
• LDAP / Active Directory integration and troubleshooting
• Splunk enterprise security