L2 Cybersecurity Expert with (UEBA, SIEM, SPLUNK)_Mumbai_Onsite
L2 Cybersecurity Expert with (UEBA, SIEM, SPLUNK)_Mumbai_Onsite
ntt data, inc.- Posted 13 hours ago
- Be among the first 10 applicants
Job Description
Location: Mumbai – Santacruz
Work Mode: Work From Office (WFO) – 5 Days
Experience:Minimum 4.5 Years
Shift:Rotational Shifts
Key Responsibilities
- Design, implement, configure and manage Splunk UEBA solutions.
- Integrate UEBA with Splunk ES/SIEM and other security data sources.
- Monitor, investigate and tune user/entity behavioral anomalies.
- Investigate high-risk users, insider threats and account takeover scenarios.
- Perform threat modelling and risk assessments.
- Develop dashboards/reports for security leadership and CISO review.
Mandatory Skills
- Splunk UEBA – Hands-on experience
- Splunk Enterprise Security (ES)
- Risk-Based Alerting (RBA) & Risk Scoring
- Behavioral Analytics & Anomaly Detection
- Insider Threat Detection
- Account Takeover / Compromised Account Detection
- Peer Group Analysis
- UEBA Model/Anomaly Tuning & Baselining
- Understanding of AI/ML-based behavioral analytics
- Security log/data-source integration and investigation
Candidate Must Be Comfortable With
- 5 Days WFO – Mumbai, Santacruz
- Rotational Shifts
- Minimum 4.5 years of relevant experience
More Info
Key Skills
AI ML-based behavioral analytics
Security log data-source integration
Risk Scoring
Insider Threat Detection
Risk-Based Alerting (RBA)
Compromised Account Detection
Splunk Enterprise Security (ES)
Splunk UEBA
About Company
Skills:
logrhythm , Powershell, Syslog, Hadoop Ecosystem, Tcpdump, Siem, Python, Wireshark, Arcsight, Machine Learning, Qradar, Splunk, Azure, Exabeam, pcap, MITRE ATT&CK, Nxlog, Apache technologies, SOAR, network forensics, Syslog-NG, Host-based intrusion detection, Windows Event Forwarding, UEBA