Principal Consultant - Splunk Admin Engineer Job in Bengaluru at Genpact

Genpact is hiring for the role of Principal Consultant - Splunk Admin Engineer!

Responsibilities of the Candidate:

•  Administering Core Splunk and Splunk App for Enterprise Security (ES), log management, ingestion, normalization, and CIM compliance.
• Provide operational support for the Enterprise Logging/ Splunk platform in support of Enterprise Security and IT Service Intelligence.
• Advanced Splunk analytics and the development and administration of custom Splunk applications.
• Splunk data ingestion, integrations with business-critical enterprise applications and systems.
  Develop specialized Splunk Security and Compliance applications, add-ons, data models, dashboards, and content.
• Develop custom Splunk applications and Add-Ons for inclusion of access events per use case criteria.
•  Leverage Modular design to onboard application/access/security logging.

Requirements:

•  Active Splunk Enterprise Admin Certified or Splunk Certified Developer – Required at a minimum.
• Required Experience: In addition to active Splunk certification(s), must also have experience with the following:
• Splunk Indexers cluster and search heads cluster management
• Splunk app & add-on development
• Strong experience in Splunk development, building dashboards, reports, and lookup tables.
• Working knowledge of Splunk including SPL, indexers, forwarders, search heads
• Expertise with cyber security data onboarding, application data onboarding, and CIM compliance.
• Holds industry-recognized certifications in security technologies or network technologies.
• Proficient knowledge and experience with SIEM, Log Management, or Data Analytical platforms.
• Strong understanding of IT Security concepts, best practices, and market direction.
• Advanced understanding of networking concepts and ability to analyze network artifacts.
• Knowledge of common information security management frameworks.
• Excellent troubleshooting, reasoning, and problem-solving skills.