Description

You will own security event monitoring, incident management, and response using Splunk.

This role is remote.

Responsibilities

• Monitor daily security events and manage incidents independently using standard operating procedures.
• Investigate security incidents and perform threat management, modeling, and use case development.
• Identify and implement improvements within the SIEM tool, including rules, log integration, and size optimization.
• Document all incident activities efficiently using ITSM best practices.

Required Skills

• 10+ years of experience in security operations.
• Proficiency with Splunk Enterprise, including indexer, heavy forwarder, and search heads.
• Hands-on experience with SIEM platforms, alerts, reports, and dashboard creation.
• Experience with Splunk Enterprise Security.
• Proficiency in scripting languages such as PowerShell and Python.
• Familiarity with Windows and Linux OS (RHEL, CentOS, Ubuntu).
• In-depth knowledge of security concepts, cyber-attacks, threat vectors, and incident management.
• Experience with Azure Security Center and Azure Defender deployment.
• Experience with ITSM ticketing systems.

Referral Bonus: ₹50,000

Key Skills

Education

Any Graduate