Job Description

:

Job Description ? Splunk

JD for L3 Splunk

- Operate SIEM consoles in order to monitor the Threats and Incidents.
- Understand cyber-attack methods.
- Perform analysis of security logs in order to detect unauthorized behavior.
- Document and contain security incidents detected on the network
- Execute incident response process when a security incident has been declared
- Maintain logs related to network functions, as well as maintenance and repair records.
- Document and present findings to management suitable for customer
- Work in shifts 24/7, weekends, holidays
- Monitor IT systems and report technical issues as per process defined
- Coordinate with customers to solve issues
- Provide daily reports to Team
- Carry out analysis of security events and report problems
- Meet SLA requirements

- Splunk architecture, components (indexer, forwarder, search head).
- Good knowledge on administering splunk indexer clusters, search head clustering, maintaining KVStores, maintain macros and views.
- Must have working knowledge of an enterprise log management tool.
- Knowledge on splunk .conf files, administering splunk on Linux systems, splunk data retention policies.




- Splunk log source integration.
- Knowledge on writing SPLs (splunk searches), create Splunk reports/dashboards and publish them to various audiences.
- Good hands on concept on Data Analysis, Extraction, transformation and Load(ETL) techniques and Splunk reporting solutions.
- Creating dashboards, reports using XML. Report generation ad customization.
- Normalization of event data, and Management of knowledge objects, data models and developing macros.
- Knowledge of app creation, user and role access permissions.
- Understanding of configuration files, precedence and working.
- Must have positive understanding of application, webserver, endpoint device and network devices.
- Expert knowledge of regular expressions and at least one common scripting language (PERL, Python, VB Script).
- Experienced with network tools such as syslog.
- Demonstrated capability to learn and adapt to new situations & requirements.
- Ability to manage multiple high priority projects and production issues.

Location

:

IND-KA-Bengaluru-Ecospace1B-ML

Created On

:

03-Feb-2026

📌 Senior SME - SOC (India)
🏢 Microland
📍 India