Splunk Engineer/ Splunk Admin

Role & responsibilities

JD:

Experience with enterprise SIEM Architecture, Administration and Development.
Familiar with the Splunk cloud platform, ES and IDM.
Onboarding log sources with different integration patterns such as Agent based, Syslog HEC, DBConnect, REST API.
Should able to develop custom integration patterns for non-supported log sources.
Understanding of regular expressions (Regex) and python programming.
Should be familiar with log parsing, data masking and log filtering.
Participate in the Splunk upgrade activities.
Renewing SSL certificates in Splunk infrastructure.
Implement and manage user authentication and authorization.
Configure role-based access controls (RBAC).
Ensure data security and compliance with organizational policies.
Well versed with SPL queries, Reports and Dashboards.
Proven ability to design and customize complex queries, develop advance visualization and optimize their performance.
Develop automation for security tool management.