Splunk Developer

Designation- Splunk developerLocation: Bangalore/ Pune/ Mumbai/ Hyderabad/ NoidaExperience (Splunk): 10-15Yrs.Job Description -Splunk developer to deliver our monitoring use cases. Define in Splunk the standard usage pattern to identify the violation in App/API usage patterns so that alarm can be triggered using Splunk;Agree on logics and develop those logics for the violations alarms to be triggered in collaboration with Business and AU's SOC;Monitor and test workflows for activities from known malicious actors on internet and add rules in Splunk to monitor the malicious activity patterns to raise an alert if the same is observed in AU network.Experience with Splunk data models, Use case development and alerting would be really good. Experience with developing and implementing risk-based alerting. Experience on Splunk ML Tool Kit, RBA, SOAR. Information Security Use case developmentMandatory Skill Required:Good knowledge on Splunk Concepts of information securityScripting language (Python is preferred)Architected Splunk infrastructureRequired skills:Must have experience in writing complex SPL queries & Regex expressions, building dashboards and alerts, App development.Must have expert knowledge of Optimizing Splunk Queries, Data Parsing and Transformation, Splunk Best Practices.Data onboarding, data skimming, events optimization,CIM, Data model, updates, upgrade of Splunk enterprise.Must good understanding on Mitre Framework.Identify the gaps with respect Midframe work and deploy new use case as desired.Should be capable to perform scenario base correlation searches.Builds from basic to advanced visualizations.Scripting (such as Python or other).Good to have log analysis and data correlation skills.Desire to work with internal teams to evangelize Splunk Best Practices, Workflows, and Processes.Must possess good communication and interpersonal skills.Automation with API's and/or Phantom setup.Play book documentation and definition in Splunk.Interested candidate please share resume to ls00891270@techmahindra.com PRB