Associate Security Analyst

• Position: Splunk Administrator
• Location: Pune
• Department: SOC Admin
• Job Summary: The Splunk Administrator is responsible for managing and optimizing the
• organization's Splunk environment. This role involves configuring, maintaining,
• and troubleshooting Splunk systems, ensuring data integrity, and providing
• insights through Splunk dashboards and reports. The ideal candidate will have a
• strong background in IT and cybersecurity, with hands-on experience in Splunk
• administration.

Key Responsibilities

Splunk Management and

Administration

• Install, configure, and manage
• Splunk instances and clusters.
• Perform regular maintenance and
• updates to Splunk systems.
• Perform configuration of search
• head, forwarder & heavy forwarder.
• Ensure high availability and
• performance of Splunk environments.

Data Ingestion and Integration

• Onboard data sources and
• configure data inputs.
• Develop and maintain data
• parsing and indexing processes.
• Integrate Splunk with various
• log sources and other monitoring tools.

Monitoring and Troubleshooting

• Monitor the health and
• performance of Splunk systems.
• Troubleshoot and resolve
• Splunk-related issues.
• Perform root cause analysis for
• system failures and performance issues.

Security and Compliance

• Implement and maintain security
• best practices within the Splunk environment.
• Ensure compliance with relevant
• regulatory requirements and internal policies.
• Develop and enforce Splunk
• access controls and user permissions.

Dashboard and Report Development

• Create and maintain custom
• dashboards, alerts, and reports.
• Work with stakeholders to
• identify requirements and deliver actionable insights.
• Optimize searches and reports
• for performance and efficiency.

Collaboration and Support

• Provide support to end-users and
• teams leveraging Splunk.
• Collaborate with IT and security
• teams to ensure seamless integration of Splunk.
• Conduct training sessions and
• workshops for Splunk users.

Requirements

Qualifications

• Bachelor's degree in Computer
• Science, Information Technology, Cybersecurity, or a related field.
• Proven experience as a Splunk
• Administrator or similar role.
• Strong understanding of Splunk
• architecture, components, and configurations.
• Proficiency in Splunk Search
• Processing Language (SPL).
• Experience with data ingestion,
• parsing, and indexing in Splunk.
• Knowledge of IT infrastructure,
• networking, and cybersecurity principles.
• Excellent problem-solving skills
• and attention to detail.
• Strong communication and
• interpersonal skills.

Preferred Qualifications

Splunk Certified Administrator or

Splunk Certified Architect certification.

Experience with scripting

• languages (e.g., Python, Bash) for automation.
• Familiarity with other SIEM tools
• and security technologies.

Experience in a regulated

industry (e.g., finance, healthcare).