Splunk Consultant

• AWS/Azure applications integration with Splunk, including large-scale data processing,
• Design, deploy and implement Splunk Enterprise core across on-prem and Splunk cloud.
• Analyse, design, document, publish and manage AWS/Azure applications in a secure Splunk environment.
• Should have good experience in Splunk Migrations from on prem to Splunk cloud.
• Participate in all aspects of the software development life cycle for AWS & Azure Data Onboarding to Splunk solutions, including planning, requirements, development, testing, and quality assurance.
• Developing security orchestration, automation, and response solution playbooks
• Develop and implementation of cloud-based integrations with Splunk, providing associated support for on-boarding as required, integrating AWS & Azure with Splunk.
• Develop and implement Multi cloud with Splunk technical efforts to design, build, and deploy.
• Developing Splunk Play books to automate the case management, Event Management, and custom functions.
• Developing Splunk Enterprise security application web framework using the Splunk UI Took Kit (SUIT).
• Ability to identify, implement and on-board appropriate cloud service for a given use case.
• Developing and configuring backup, monitoring, patching and security of cloud estate on Splunk.
• Develop and Troubleshoot Security incidents, identify root cause, fix and document problems, and implement preventive measures.
• Developing Splunk Enterprise security application use cases for the SOC detection Engineering using the MITRE ATT&CK framework
• Developing security orchestration, automation, and response solution playbooks to integrate with Splunk Enterprise security.
• Demonstrate Flexible, adaptable, helpful approaches and help the team flourish in cross-cultural environment.
• Demonstrate Excellent communication, presentation, and interpersonal skills.
• Bring-in Service improvement in the existing processes.
• Possess strong skills in planning, project management and attention to detail and has excellent problem solving and evaluative judgement skills.
• Communicate and co-ordinate people across geographies and among multiple teams to handle team across offshore and onshore.
• Manage multiple complex initiatives with competing deadlines and through various stages of development and approval.
• Excellent problem-solving and optimization skills - identify and resolve problems in a timely manner and report issues to the management team; demonstrate appropriate risk-taking and comfort with ambiguity.
• Relationship and teamwork focus
• Flexible, adaptable, helpful approach
• Welcoming changes and feedback

• The candidate must hold certifications as both a Splunk Core Consultant and a Splunk Architect.
• Additionally, the candidate should possess the Splunk Advanced Accreditation Migrations certification.
• A minimum of three years of experience in implementing Splunk Enterprise core is required.
• Furthermore, the candidate should have at least one year of experience in Splunk Enterprise security and SOAR (Security Orchestration, Automation, and Response).

Dipole