ZA
Splunk ES Developer
Accepting applicationsZorba AI · Bengaluru, Karnataka, India
Full-Time Mid_senior PythonSOC
Posted
4d ago
Category
Design
Experience
Mid_senior
Country
India
Slunk Enterprise Security
Your key responsibilities:
Design and run a scalable Splunk Cloud and on-prem security platform that underpins enterprise-wide threat detection and security monitoring.
Build high-quality detections, dashboards, and analytics that directly enable incident response, threat hunting, and data-driven security decisions.
Partner closely with SOC analysts and security teams to continuously improve Splunk use cases, data quality, and overall security capability.
Skills And Attributes
Strong hands-on experience designing, administering, and supporting Splunk Enterprise and Splunk Cloud in a security (SIEM) context.
Advanced proficiency in Splunk SPL, including building and tuning complex searches, detections, dashboards, and alerts.
Proven experience onboarding and normalising diverse data sources into Splunk, including CIM mapping and data quality optimisation.
Experience working with Splunk Enterprise Security, UEBA, and SOAR, including use case and playbook development.
Exposure to integrating Splunk with broader security tooling such as firewalls, EDR, IDS/IPS, and threat intelligence platforms.
Scripting or automation experience using Python, Bash, or PowerShell to streamline onboarding and operational tasks.
Strong collaboration skills, with the ability to explain technical concepts clearly to security analysts and stakeholders.
Certification
Splunk ES certification.
Skills: data,splunk,enterprise,security
Show more Show less
Your key responsibilities:
Design and run a scalable Splunk Cloud and on-prem security platform that underpins enterprise-wide threat detection and security monitoring.
Build high-quality detections, dashboards, and analytics that directly enable incident response, threat hunting, and data-driven security decisions.
Partner closely with SOC analysts and security teams to continuously improve Splunk use cases, data quality, and overall security capability.
Skills And Attributes
Strong hands-on experience designing, administering, and supporting Splunk Enterprise and Splunk Cloud in a security (SIEM) context.
Advanced proficiency in Splunk SPL, including building and tuning complex searches, detections, dashboards, and alerts.
Proven experience onboarding and normalising diverse data sources into Splunk, including CIM mapping and data quality optimisation.
Experience working with Splunk Enterprise Security, UEBA, and SOAR, including use case and playbook development.
Exposure to integrating Splunk with broader security tooling such as firewalls, EDR, IDS/IPS, and threat intelligence platforms.
Scripting or automation experience using Python, Bash, or PowerShell to streamline onboarding and operational tasks.
Strong collaboration skills, with the ability to explain technical concepts clearly to security analysts and stakeholders.
Certification
Splunk ES certification.
Skills: data,splunk,enterprise,security
Show more Show less