Description

You will manage and analyze security and operational data using Splunk to drive incident response and threat identification.

This role is on-site.

Responsibilities

• Manage and maintain Splunk environments, including installation, configuration, and troubleshooting.
• Develop and optimize data ingestion pipelines from various sources.
• Create and execute complex Splunk searches to identify trends, anomalies, and threats.
• Develop customized reports and dashboards to visualize data and provide insights.
• Assist in incident response by analyzing Splunk data to identify root causes.

Required Skills

• 5+ years of experience with Splunk administration and configuration.
• Strong proficiency in Splunk Search Processing Language (SPL).
• Understanding of data ingestion and indexing concepts.
• Knowledge of security concepts and incident response methodologies.
• Familiarity with Python and PowerShell.
• Excellent analytical and problem-solving skills.

Preferred Skills

• Certification in Splunk administration or related fields.
• Knowledge of cloud platforms such as AWS, Azure, or GCP.

Key Skills

Education

Any Graduate