Splunk Admin and developer
Full Time
Bengaluru, Chennai
Posted 2 months ago
Job Features
| Job Category | IT |
| Experience | 6 - 8 yrs |
| Skills | Splunk queries, dashboards and visualizations |
| Primary skills | Splunk queries, SIEM |
| Education | Any Graduate |
| Openings | 1 |
| Job Description | Summary: This role will be focused on cyber data analytics and automation. The individual will be responsible for developing and implementing data-driven security solutions to protect assets, data, brand, and consumers in a cloud-first, consumer-friendly operating model. This role will require a skilled cyber security professional with strong technical expertise in data engineering, analytics, and automation to partner with IT Architecture, IT Engineering, IT Operations, DevOps, and business leaders. Responsibilities: • Lead the design and implementation of security architectures and solutions. • Develop and implement automation strategies to improve efficiency and effectiveness of security operations. • Develop advanced Splunk queries, dashboards and visualizations to support security operations. • Lead the implementation and optimization of SIEM solutions to enhance threat detection and response capabilities • Develop and implement security automation and orchestration (SOAR) solutions to automate and streamline automate incident response. • Evaluate and enhance SOAR capabilities. • Develop and deploy AI/ML models to identify anomalies and predict security threats. • Integrate AI/ML-driven insights into security infrastructure. • Design, build, and maintain scalable data pipelines for security data collection, processing, and storage. • Ensure data quality, integrity, and consistency across multiple sources. • Optimize data pipelines for performance, reliability and scalability. • Lead in depth analysis of complex security events and incidents. • Stay updated on the latest industry trends, technologies and best practices Required Qualifications: • 6+ years of experience in cybersecurity, with a focus on Splunk, SIEM, SOAR, automation, ML, and data pipelines. • 3+ years of experience with security automation and orchestration (SOAR) platforms • 3+ years of experience in cyber data engineering and/or cyber data analytics • Bachelor's degree in a STEM field or Computer Information Sciences, or 10+ years of relevant experience • Proficient in scripting technologies such as Python, PowerShell, and APIs • Hands-on experience in automation platforms, including writing playbooks and troubleshooting • Familiarity with ETL platforms, relational databases, columnar databases, SIEM solutions, and data visualization tools like Power BI • Strong debugging and problem-solving skills, with the ability to integrate multiple tools and APIs • Excellent communication and interpersonal skills to work with various stakeholders • Proficient in Gitlab Preferred Qualifications: • Experience with public cloud platforms (AWS, Azure, etc.) • Expertise in cloud-native technologies and implementation patterns to drive innovation and efficiency • Cyber security certifications (CISSP, CISM, CISA, etc.) • Experience with Agile methodologies and collaborative work environments • Familiar with corporate change management |