Splunk Detection Engineer

Inspira Enterprise; Navi Mumbai; On-site; INR 1,800,000 - 2,600,000; Full time

Job summary

Inspira Enterprise in Navi Mumbai is seeking an experienced cybersecurity analyst to join our SOC team. You will perform advanced SOC analysis, triage incidents, and drive incident reporting while interfacing with cross-functional teams.

The ideal candidate has 5+ years in cybersecurity (minimum 3+ in SOC), deep Splunk ES/Core expertise with SPL queries, and hands-on experience with Proofpoint and CrowdStrike. Shift work and strong communication are essential.

Qualifications

• 5+ years in cybersecurity with at least 3+ years in a SOC.
• Experience in incident response, triage, threat detection, and alert tuning.
• Hands-on Splunk ES/Core experience and complex SPL queries.

Responsibilities

• Perform advanced SOC analysis, including triage, incident reporting, and threat hunting.
• Help build security detection content within Splunk Enterprise Security.
• Work across ticketing and orchestration platforms to remediate alerts and improve detection.
• Support continuous improvement by tuning alerts, managing logs, and automating repetitive tasks.

Skills

SOC operations

Incident response

Threat detection

Splunk ES/Core

SPL queries

Communication

Shift work

Team collaboration

Career growth mindset

Tools

Proofpoint TAP/TRAP

CrowdStrike Falcon

Job description

Navi Mumbai, India | Posted on 08/12/2026

Who you are:

• A cybersecurity analyst with 5+ years of experience (minimum 3+ years in a SOC environment)
• Experienced in incident response, triage, threat detection, and alert tuning
• Advanced experience with Splunk ES/Core and writing complex SPL queries is a must
• Familiar with email and endpoint security platforms like Proofpoint TAP/TRAP and CrowdStrike Falcon
• Comfortable with shift work
• A strong communicator who can work collaboratively with cross-functional teams
• Interested in career growth in cybersecurity

It would be awesome if you had:

• Hands-on experience with cloud security platforms like Wiz, Zscaler and Proofpoint Email GW(would be helpful)
• Relevant certifications such as CompTIA Sec+, Net+, OSCP, or CySA+
• Scripting experience (Python, PowerShell) for automation and enrichment
• Experience using AI-tools such as Claude Code, Codex, Cursor, and LLM’s to solve security problems.

What you will do:

• Perform advanced SOC analysis, including triage, incident reporting, and threat hunting
• Help us build security detection content within Splunk Enterprise Security
• Work across ticketing and orchestration platforms to remediate alerts and improve detection
• Support continuous improvement by tuning alerts, managing logs, and automating repetitive tasks