Who you are:
A cybersecurity analyst with 5+ years of experience (minimum 3+ years in a SOC environment)
Experienced in incident response, triage, threat detection, and alert tuning
Advanced experience with Splunk ES/Core and writing complex SPL queries is a must
Familiar with email and endpoint security platforms like Proofpoint TAP/TRAP and CrowdStrike Falcon
Comfortable with shift work
A solid communicator who can work collaboratively with cross-functional teams
Interested in career growth in cybersecurity
It would be awesome if you had:
Hands-on experience with cloud security platforms like Wiz, Zscaler and Proofpoint Email GW(would be helpful)
Relevant certifications such as CompTIA Sec+, Net+, OSCP, or CySA+
Scripting experience (Python,



PowerShell) for automation and enrichment
Experience using AI-tools such as Claude Code, Codex, Cursor, and LLM’s to solve security problems.
What you will do:
Perform advanced SOC analysis, including triage, incident reporting, and threat hunting
Help us build security detection content within Splunk Enterprise Security
Work across ticketing and orchestration platforms to remediate alerts and improve detection
Support continuous improvement by tuning alerts, managing logs, and automating repetitive tasks

📌 Splunk Detection Engineer (Navi Mumbai)
🏢 Important Group
📍 Navi Mumbai