Slunk Enterprise Security:

Your key responsibilities:

-
Design and run a scalable Splunk Cloud and on-prem security platform that underpins enterprise-wide threat detection and security monitoring.

-
Build high-quality detections, dashboards, and analytics that directly enable incident response, threat hunting, and data-driven security decisions.

-
Partner closely with SOC analysts and security teams to continuously improve Splunk use cases, data quality, and overall security capability.

Skills and attributes:

-
Robust hands-on experience designing, administering, and supporting Splunk Enterprise and Splunk Cloud in a security (SIEM) context.

-
Advanced proficiency in Splunk SPL, including building and tuning complex searches, detections, dashboards, and alerts.

-




Proven experience onboarding and normalising diverse data sources into Splunk, including CIM mapping and data quality optimisation.

-
Experience working with Splunk Enterprise Security, UEBA, and SOAR, including use case and playbook development.

-
Exposure to integrating Splunk with broader security tooling such as firewalls, EDR, IDS/IPS, and threat intelligence platforms.

-
Scripting or automation experience using Python, Bash, or PowerShell to streamline onboarding and operational tasks.

-
Strong collaboration skills, with the ability to explain technical concepts clearly to security analysts and stakeholders.

Certification:

-
Splunk ES certification.

📌 Splunk ES Developer (Pune)
🏢 Zorba Consulting India
📍 Pune