Must-Have**
Experience with Splunk enterprise security is must.
Location - PAN India
Design and develop detections (correlation searches) in Splunk Enterprise Security
Build and maintain Splunk Data Models and ensure proper acceleration
Map logs to CIM-compliant data models and fix field mapping issues
Convert raw/index-based SPL searches into optimized tstats (datamodel) queries
Validate and optimize detections for performance and accuracy
Splunk Platform Administration
Experience with Splunk enterprise security is must.
LDAP / Active Directory integration and troubleshooting
Splunk enterprise security