Job Summary

We're hiring a Splunk Administrator to support and optimize enterprise-scale SIEM and security monitoring settings!

Responsibilities
Design, develop, and maintain Splunk Enterprise Security (ES) use cases, alerts, dashboards, and correlation searches.
Enhance threat detection capabilities through log analysis, content tuning, and security monitoring improvements. Integrate and onboard data from security tools, cloud platforms, and enterprise applications.
Collaborate with SOC teams to improve incident detection, investigation, and response processes. Implement automation and orchestration to streamline security operations.
Create technical documentation and share best practices with internal teams. Work with cross-functional stakeholders to deliver effective SIEM and cybersecurity solutions.

Your Profile
Solid hands-on experience with Splunk Enterprise Security (ES).




Experience designing and developing complex incident detection and response use cases.
Expertise in: Log analysis ,Log normalization, Parser creation and validation, Custom log onboarding
Experience creating advanced search queries and security analytics use cases.
Robust Experience working with SIEM platforms.
Strong expertise in: Splunk Administration ,Splunk Enterprise Security, Security Use Case Development, Security Monitoring
Excellent knowledge of: SPL (Splunk Processing Language),KQL (Kusto Query Language),SQL-based query languages

What you'll love about working here
At Capgemini, you can work on cutting-edge projects in tech and engineering with industry leaders or create solutions to overcome societal and environmental challenges.

📌 Splunk Admin Navi Mumbai
🏢 Capgemini
📍 Navi Mumbai