Location: Mumbai – Santacruz

Work Mode: Work From Office (WFO) – 5 Days

Experience: Minimum 4.5 Years

Shift: Rotational Shifts

Key Responsibilities

- Design, implement, configure and manage Splunk UEBA solutions.
- Integrate UEBA with Splunk ES/SIEM and other security data sources.
- Monitor, investigate and tune user/entity behavioral anomalies.
- Investigate high-risk users, insider threats and account takeover scenarios.
- Perform threat modelling and risk assessments.
- Develop dashboards/reports for security leadership and CISO review.

Mandatory Skills

- Splunk UEBA – Hands-on experience
- Splunk Enterprise Security (ES)
- Risk-Based Alerting (RBA) & Risk Scoring
- Behavioral Analytics & Anomaly Detection
- Insider Threat Detection
- Account Takeover / Compromised Account Detection
- Peer Group Analysis
- UEBA Model/Anomaly Tuning & Baselining
- Understanding of AI/ML-based behavioral analytics
- Security log/data-source integration and investigation

Candidate Must Be Comfortable With

- 5 Days WFO – Mumbai, Santacruz
- Rotational Shifts
- Minimum 4.5 years of relevant experience

📌 Cybersecurity Expert with (UEBA, SIEM, SPLUNK)_Mumbai_Onsite (Mumbai)
🏢 NTT DATA
📍 Mumbai