Splunk Developer

Job Overview

We are seeking a skilled Splunk Developer with demonstrated expertise in Splunk Enterprise Security to join our team. The role involves designing and building advanced detection mechanisms, optimizing data models, and maintaining high-performance Splunk environments across PAN India locations.

Key Responsibilities

• Develop and implement correlation searches (detections) within Splunk Enterprise Security.
• Create and manage Splunk Data Models to ensure efficient acceleration and operation.
• Align and map incoming logs to CIM-compliant data models, resolving any field mapping discrepancies.
• Transform raw or index-based queries into streamlined tstats (datamodel) searches for optimization.
• Conduct validation and fine-tuning of detection rules for accuracy and enhanced performance.
• Oversee administration and maintenance of the Splunk platform.
• Implement and troubleshoot LDAP and Active Directory integrations within Splunk environments.
• Apply expertise specific to Splunk Enterprise Security in all aspects of development and support.

Requirements

• Strong hands-on experience working with Splunk Enterprise Security is mandatory.