Senior Mss Engineer_Splunk
Senior Mss Engineer_Splunk
Cyber Gate DefenseFresher
- Posted 2 months ago
- Be among the first 10 applicants
Job Description
Deployment & Architecture
- Deploy Splunk Enterprise / Distributed Architecture
- Configure Indexers, Search Heads, Forwarders
- Implement clustering (Indexer / SH Cluster)
- Configure Universal Forwarders & Heavy Forwarders
- Create data inputs (syslog, API, cloud integrations)
- Index creation and retention policy configuration
- Field extraction, sourcetype validation, and parsing
- Develop SPL-based detection queries
- Create correlation searches in ES (Enterprise Security)
- Implement Risk-Based Alerting (RBA)
- Fine-tune alerts to reduce false positives
- Conduct use case gap analysis
- Validate ingestion pipeline (Forwarder Indexer Search Head)
- Troubleshoot parsing, indexing, and timestamp issues
- Monitor ingestion delays and indexing queues
- Optimize search performance
- Monitor license utilization (Daily indexing volume)
- Perform Splunk upgrades and app updates
- Backup configurations and validate restore
- Performance tuning and resource optimization
- Dashboard creation and SOC visibility enhancements
- Alert lifecycle improvements
- Support threat hunting queries
More Info
Key Skills
Heavy Forwarders
sourcetype validation
Universal Forwarders
Field extraction
Splunk Enterprise
cloud integrations
Risk-Based Alerting
Data inputs
About Company