Title: Splunk SME
Location: Chennai
Exp: 5+ Years

Key Responsibilities
Design, implement, administer, and optimize Splunk Enterprise and Splunk Enterprise Security (ES) settings.
Develop and maintain dashboards, reports, alerts, and visualizations using SPL (Search Processing Language).
Integrate logs from various sources, including servers, network devices, cloud platforms, applications, and security tools.
Build and maintain correlation searches, notable events, and detection use cases for security monitoring.
Monitor system performance, troubleshoot issues, and optimize Splunk indexing and search efficiency.
Support incident investigation, root cause analysis, and threat detection activities.
Configure data onboarding, parsing, indexing, forwarding, and retention policies.
Work closely with SOC, infrastructure, and application teams to enhance monitoring and security visibility.
Perform platform upgrades, patching, and capacity planning.
Prepare technical documentation, operational procedures, and knowledge base articles.

Required Skills
5+ years of hands-on experience with Splunk Enterprise administration and engineering.




Solid expertise in Splunk Enterprise Security (ES) and SIEM implementations.
Advanced knowledge of SPL (Search Processing Language).
Experience integrating Windows, Linux, network, cloud, and application logs.
Familiarity with cybersecurity concepts, threat detection, MITRE Telecommunication&CK;, and incident response.
Experience with Universal Forwarders, Indexers, Search Heads, Deployment Server, and Cluster Management.
Knowledge of scripting (Python, Shell, or PowerShell) for automation is an added advantage.
Excellent troubleshooting, analytical, and communication skills.

Preferred Qualifications
Splunk Core Certified Power User, Splunk Enterprise Certified Admin, or Splunk Enterprise Security Certified Admin.
Experience with cloud platforms (AWS, Azure, or GCP) and security tools is preferred.

",

This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying

📌 Splunk Sme Chennai
🏢 NR Consulting
📍 Chennai