Key Responsibilities

- Monitor and analyze security alerts and events using Splunk SIEM.
- Perform incident triage, investigation, and escalation in line with SOC procedures.
- Respond to security incidents such as phishing attacks, malware infections, unauthorized access, and suspicious activities.
- Conduct log analysis across multiple systems including endpoints, servers, network devices, and cloud environments.
- Develop and fine-tune Splunk searches, dashboards, alerts, and correlation rules.
- Participate in threat hunting activities to proactively identify hidden threats.
- Support the incident response lifecycle (Detection, Analysis, Containment, Eradication, Recovery).
- Document incidents, findings, and remediation actions in detail.
- Collaborate with internal teams (IT, Network, Security Engineering) for issue resolution.




- Stay updated with the latest cybersecurity threats, vulnerabilities, and attack techniques.

Required Skills

- Hands-on experience with Splunk (log analysis, dashboards, alerting, SPL queries).
- Strong understanding of SOC operations and SIEM tools.
- Knowledge of incident response processes and procedures.
- Familiarity with:
- Network protocols (TCP/IP, DNS, HTTP/HTTPS)
- Firewalls, IDS/IPS, endpoint security tools

- Basic understanding of cybersecurity frameworks and best practices.
- Ability to analyze large volumes of logs and identify anomalies.
- Robust analytical and problem-solving skills.

📌 SIEM Analyst - Splunk ( Consultant / AM / Manager ) (Mumbai)
🏢 KPMG Assurance and Consulting Services
📍 Mumbai