Splunk Admin

Your Role

We’re hiring a

to support and optimize enterprise-scale SIEM and security monitoring environments! If you have expertise in 

 apply now for

candidates with

of experience. 

• Design, develop, and maintain Splunk Enterprise Security (ES) use cases, alerts, dashboards, and correlation searches.
• Enhance threat detection capabilities through log analysis, content tuning, and security monitoring improvements. Integrate and onboard data from security tools, cloud platforms, and enterprise applications.
• Collaborate with SOC teams to improve incident detection, investigation, and response processes. Implement automation and orchestration to streamline security operations.
• Create technical documentation and share best practices with internal teams. Work with cross-functional stakeholders to deliver effective SIEM and cybersecurity solutions.

Your Profile

• Strong hands-on experience with Splunk Enterprise Security (ES).
• Experience designing and developing complex incident detection and response use cases.
• Expertise in: Log analysis ,Log normalization, Parser creation and validation, Custom log onboarding
• Experience creating advanced search queries and security analytics use cases.
• Strong Experience working with SIEM platforms.
• Strong expertise in: Splunk Administration ,Splunk Enterprise Security, Security Use Case Development, Security Monitoring
• Excellent knowledge of: SPL (Splunk Processing Language),KQL (Kusto Query Language),SQL-based query languages

What you’ll love about working here

• We offer a range of career paths and internal opportunities within Capgemini group. 
• You will get comprehensive wellness benefits including health checks, telemedicine, insurance with top-ups, elder care, partner coverage or new parent support via flexible work.
• At Capgemini, you can work on cutting-edge projects in tech and engineering with industry leaders or create solutions to overcome societal and environmental challenges.