Job Description:
Must-Have**
Experience with Splunk enterprise security is must.
Location - PAN India
- Design and develop detections (correlation searches) in Splunk Enterprise Security
- Build and maintain Splunk Data Models and ensure proper acceleration
- Map logs to CIM-compliant data models and fix field mapping issues
- Convert raw/index-based SPL searches into optimized tstats (datamodel) queries
- Validate and optimize detections for performance and accuracy
- Splunk Platform Administration
- Experience with Splunk enterprise security is must.
- LDAP / Active Directory integration and troubleshooting
- Splunk enterprise security
