We're hiring a Splunk Administrator to support and optimize enterprise-scale SIEM and security monitoring environments!
Responsibilities
- Design, develop, and maintain Splunk Enterprise Security (ES) use cases, alerts, dashboards, and correlation searches.
- Enhance threat detection capabilities through log analysis, content tuning, and security monitoring improvements. Integrate and onboard data from security tools, cloud platforms, and enterprise applications.
- Collaborate with SOC teams to improve incident detection, investigation, and response processes. Implement automation and orchestration to streamline security operations.
- Create technical documentation and share best practices with internal teams. Work with cross-functional stakeholders to deliver effective SIEM and cybersecurity solutions.
Your Profile
- Solid hands-on experience with Splunk Enterprise Security (ES).
- Experience designing and developing complex incident detection and response use cases.
- Expertise in: Log analysis ,Log normalization, Parser creation and validation, Custom log onboarding
- Experience creating advanced search queries and security analytics use cases.
- Strong Experience working with SIEM platforms.
- Strong expertise in: Splunk Administration ,Splunk Enterprise Security, Security Use Case Development, Security Monitoring
- Excellent knowledge of: SPL (Splunk Processing Language),KQL (Kusto Query Language),SQL-based query languages
What you'll love about working here
- At Capgemini, you can work on cutting-edge projects in tech and engineering with industry leaders or create solutions to overcome societal and environmental challenges.