Enter a job title or keyword
Splunk SME
Job Location:
Monthly Salary:
Posted:
24 October 2026 (Yesterday)
Posted:
Application Deadline:
21 January 2027
Application Deadline:
Vacancies:
1 Vacancy
Vacancies:
Job Summary
Title: Splunk SME
Location: Chennai
Exp: 5 Years
Job Description:
Location: Chennai
Exp: 5 Years
Job Description:
Key Responsibilities
- Design implement administer and optimize Splunk Enterprise and Splunk Enterprise Security (ES) environments.
- Develop and maintain dashboards reports alerts and visualizations using SPL (Search Processing Language).
- Integrate logs from various sources including servers network devices cloud platforms applications and security tools.
- Build and maintain correlation searches notable events and detection use cases for security monitoring.
- Monitor system performance troubleshoot issues and optimize Splunk indexing and search efficiency.
- Support incident investigation root cause analysis and threat detection activities.
- Configure data onboarding parsing indexing forwarding and retention policies.
- Work closely with SOC infrastructure and application teams to enhance monitoring and security visibility.
- Perform platform upgrades patching and capacity planning.
- Prepare technical documentation operational procedures and knowledge base articles.
Required Skills
- 5 years of hands-on experience with Splunk Enterprise administration and engineering.
- Strong expertise in Splunk Enterprise Security (ES) and SIEM implementations.
- Advanced knowledge of SPL (Search Processing Language).
- Experience integrating Windows Linux network cloud and application logs.
- Familiarity with cybersecurity concepts threat detection MITRE Telecommunication&CK and incident response.
- Experience with Universal Forwarders Indexers Search Heads Deployment Server and Cluster Management.
- Knowledge of scripting (Python Shell or PowerShell) for automation is an added advantage.
- Excellent troubleshooting analytical and communication skills.
Preferred Qualifications
- Splunk Core Certified Power User Splunk Enterprise Certified Admin or Splunk Enterprise Security Certified Admin.
- Experience with cloud platforms (AWS Azure or GCP) and security tools is preferred.
About Company
About Us NR Consulting is your premier partner, delivering unmatched staffing and cutting-edge technology solutions tailored to your unique business needs. We take pride in connecting leading organizations with top-tier…
