Key Responsibilities

Process

- Day to day Operational issues, requests and Project tasks

- Incident response and resolution within SLA's with excellent analytical and troubleshooting skills

- Providing all the necessary details to leads about the issue, steps taken, recommendation and any other relevant information

- Ticket Status Check and Update

- Respond to False Positive Alerts

- Incident Escalation and Progress Monitoring

- Create, review, update, and maintain Standard Operating Procedures.

- Prepare RCA for the escalated incidents.

- Perform the Shift handovers

SPLUNK

- Configure and troubleshoot Splunk components such as indexer, forwarder, search head, etc

- Comfortable with Splunk queries to create Splunk dashboards.

- Configuring Splunk as per the Best Practices (apps, add-ons, searches, etc).

- Creates, modifies, and updates Security Information Event Management rules.

- Recognizes potential, successful and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event detail.

- Triage of non-security alerts based on priority, problem identification and escalation.

- Escalate to designated contacts within Stratogent and Customer for issues outside SOPs, or when SOPs fail to resolve the issue.

- Utilize Security Information and Event Management to monitor data flow between networks.

- Work directly with delivery teams or customers to gather logging requirements.

- Convert Logging requirements into Splunk designs following best practices.





- Perform environment health checks.

- Troubleshoot Issues

- Update and / or create technical documentation.

Security

- Leads the escalation as a point for security incidents.

- Analyze & investigate cyber threats on a real-time/day-to-day basis, involving alerts review, log analysis, and event/incident correlations.

- Prepare Document and Maintain Procedures, Response Plan, Runbooks, and associated processes for continuous improvement.

- Assist L1/L2 for security event and initial incident response to detected threats.

- Regularly review and recommend changes to policies or controls as needed to enhance security.

- Identifies potential gaps and offers solutions to include internal team needs, product improvements and client security posture.

- Develop reporting with focused messages to enable the stakeholders to understand their and responsibilities.

- Train and mentor, the peers and juniors in the team.

Must-have Skills: Prior Working Experience

- Must have worked on Splunk

- Performing incident handling, evidence acquisition, endpoint and Network,and Security Incident management

- Customer-focused

- Excellent communication skills (reading, writing, speaking and listening)

- Highly self-motivated and directed.

- Excellent attention to detail.

- Flexibility and willingness to work on different and multiple technologies

- Ability to effectively prioritize, organize and execute tasks in a high-pressure setting

📌 Splunk Administrator/Developer (Bengaluru)
🏢 Stratogent
📍 Bengaluru