Job Description

Job Description

Must Have Technical/Functional Skills

• Splunk Architect or Admin Experience

• Splunk Enterprise Security administration

• Design of Splunk Single Site or Multi-site distributed deployment or Splunk Cloud Administration

• Splunk Software Upgrade and management of HF and UF

• Splunk TA-addon, Search Apps deployment

• Experience in Splunk SPL language writing the Cyber security correlation rule

• Create splunk dashboards, write splunk search, familiar with splunk search functions. create search alerts.

• Should have experience in Cyber Security

• Splunk Data model(CIM) development

• Splunk field extractions and regular expressions

• Splunk knowledge objects development, event types, macro creation

• Splunk Data on-boarding experience for Security devices, OS platform, Application logs,

DB audit trail logs and Custom addon creation

• Create splunk deployment server apps and Deployment of apps

• Splunk TA addon installation, create parsing rules and transform rules.

• Splunk Enterprise Security experience preferred

• Splunk DB connect app Management and troubleshooting

• Splunk HF/UF and HEC management

• Syslog-NG or rsyslog configuration management

• Splunk Workflow actions creation management

Job Tags

Similar Jobs