Location: Mumbai – Santacruz
Work Mode: Work From Office (WFO) – 5 Days
Experience: Minimum 4.5 Years
Shift: Rotational Shifts
Key Responsibilities
• Design, implement, configure and manage Splunk UEBA solutions.
• Integrate UEBA with Splunk ES/SIEM and other security data sources.
• Monitor, investigate and tune user/entity behavioral anomalies.
• Investigate high-risk users, insider threats and account takeover scenarios.
• Perform threat modelling and risk assessments.
• Develop dashboards/reports for security leadership and CISO review.

Mandatory Skills
• Splunk UEBA – Hands-on experience
• Splunk Enterprise Security (ES)
• Risk-Based Alerting (RBA) & Risk Scoring
• Behavioral Analytics & Anomaly Detection
• Insider Threat Detection
• Account Takeover / Compromised Account Detection
• Peer Group Analysis
• UEBA Model/Anomaly Tuning & Baselining
• Understanding of AI/ML-based behavioral analytics
• Security log/data-source integration and investigation

Candidate Must Be Comfortable With
• 5 Days WFO – Mumbai, Santacruz
• Rotational Shifts
• Minimum 4.5 years of relevant experience

📌 Cybersecurity Expert with (Mumbai)
🏢 NTT DATA
📍 Mumbai