IT Security with Splunk

IT Secruity Splunk

Technical Skills and Tools

• Be\Btech with 6 to 8 years of experience
• Strong experience with Splunk Enterprise and Splunk Enterprise Security (ES).
• Hands-on expertise developing correlation searches, notable events, risk-based alerting, and dashboards.
• Proficiency in Splunk's query language is required to build complex, human-readable detection rules
• Experience with log onboarding, field extractions, parsing, CIM normalization, and data modeling.
• Strong understanding of:
• SIEM technologies
• Security Operations (SOC)
• Threat Detection & Response
• Incident Response
• Threat Hunting
• Cyber Kill Chain
• MITRE ATT&CK Framework
• Python
• PowerShell
• Bash/Shell Scripting
• REST APIs
• SOAR Platforms
• AWS, Azure, or Google Cloud Platform
• Windows Server Administration
• Linux Administration
• Active Directory and Azure AD / Entra ID