Splunk Architect

Job Title: Splunk Architect
Work Location: CHENNAI, HYDERABAD
Skill Required: Splunk
Experience: 6-8 years

Job Description:

• Should be Splunk admin certified and Enterprise Splunk architect certification.
• Performing hands-on architecture, design, and development of systems in both managed & SaaS environments. Developed Splunk infrastructure and related solutions.
• Standardize and implement Splunk Universal Forwarder deployment, configuration and maintenance in Linux and Windows platforms
• Maintain, Manage and Monitor Splunk Infrastructure (Identify bad searches, dashboards and health of Splunk)
• Used User Behaviour Analytic to parse data into Splunk and detect anomalies in true positive events
• Used SNMP (Simple network management protocol) to monitor the application on the server
• Using Splunk Enterprise to perform data mining and analysis, utilizing various queries and reporting methods
• Analyzing and monitoring security-related technologies including host-based firewalls, host-based using IDS, LDP server configuration controls, logging, SIEM, monitoring tools, antivirus systems.
• Actively hunt for and dissect previously unidentified threats and differentiate between potential intrusion attempts and false alarms
• Monitor and detecting security use cases on Splunk e.g. SQL Injection, SQL Map, Burp-suit intruder
• Using Splunk Phantom Security Orchestration, Automation, and Response (SOAR) system to evaluate notable event for correlation alert
• Develop alerts and timed reports Develop and manage Splunk applications
• Performed Splunk knowledge objects e.g. Configuration, Uploading data, field extraction, validation of boarded data, REGEX search, event parsing, and data transformation
• Use Splunk GUI development creating Splunk apps, searches, Data models, dashboards, and Reports using the Splunk query language.
• Perform index administration, maintenance and optimization and create data retention
• Create Splunk Applications, Splunk Dashboard and Visualizations.
• Expertise in scripting (PowerShell, Python, .net), CI/CD pipelines, Integrations with other tools
• Expertise in Splunk SPL (Search processing Language)
• Manage and troubleshoot Splunk accounts (create, delete, modify, etc.)
• Transfer Splunk log file in Json format to Elastic search
• Support Splunk on UNIX, Linux and Windows-based platforms. Assist with automation of processes and procedures
• Provided different method to install search head, forwarder and deployment servers and troubleshoot at the back end
• Implementing and maintaining Splunk infrastructure and configurations in a single environment and in a clustered environment
• Sound knowledge of Senior Architect role and Agile Methodologies
• Sound Knowledge of Splunk ITSI