Splunk Admin 4 to 9 Years Pan India - Bengaluru, India - Capgemini

Capgemini
Capgemini
Verified Company
Bengaluru, India

4 days ago

Deepika Kaur

Posted by:

Deepika Kaur

beBee Recuiter
Description
Roles and Responsibilities

  • Review alerts triggered from insider risk, data loss and UEBA consoles and determining if the risk is real or normal work.
  • Perform adhoc searches using Security Incident and Event Management (SIEM) (Splunk) Dashboards
  • Create/Maintain dashboards in Splunk for high level insights into the program.
  • Create reports of insider risk and/or data loss incidents and present findings to management
  • Provide feedback and suggestions on improving the analysis and rules used for user behavior analysis
  • Identify gaps in information insights that may help with detecting and assessing insider concerns
  • Helps identify and obtain log information and other contextual data for use in insider threat detection and assessment
  • Engage with end users/Managers to investigate the alerts and educate them with Data Protection Policy

Desired Characteristics/Technical Expertise:

  • Experience in anomaly detection, data analytics, behavior analytics
  • Training in Information Securityspecific disciplines
  • Strong Splunk experience in advanced reporting and alerting, queries, and data modeling
  • IT Risk & Security background with scripting and coding skills

Primary Skills

  • Splunk Administration/Development.
  • Dashboard Management
  • Security Incident and Event Management (SIEM)

Secondary Skills

  • Good to have Splunk Certifications.
More jobs from Capgemini
See all jobs of Capgemini