Cyber Security Engineer

Skill : Splunk

Experience Range : 5+ years

Joining Location : PAN India

We are currently planning to do a Walk-In Interview on 22nd November 2025 at TCS Chennai.

WALK IN DATE – 22nd November 2025 (Saturday)

WALK IN LOCATION - Chennai / Bangalore / Hyderabad

Job Description : Required Skills

Strong understanding of log management and SIEM concepts.

Proficiency in log source onboarding, parsing, and CIM compliance.

Experience in content development (correlation rules, dashboards, alerts) and tuning.

Solid troubleshooting skills for both Splunk platform and security content.

Experience with Splunk administration, deployment, and health monitoring.

Familiarity with SIEM optimization techniques and best practices.

Ability to conduct gap analysis and develop actionable recommendations.

Excellent communication and documentation skills.

Relevant certifications (e.g., Splunk Certified Admin, Splunk Certified Architect) are a plus.

Good-to-Have :

Splunk Certified Admin, Splunk Certified Architect) are a plus.

Roles and Responsibilities :

Implement and configure Splunk SIEM solutions tailored to organizational security requirements.

Onboard diverse log sources into Splunk, ensuring data is parsed and normalized according to the Common Information Model (CIM).

Develop and maintain data models, field extractions, and event parsing logic.

Design, develop, and tune detection rules, correlation searches, dashboards, and alerts.

Continuously optimize content to reduce false positives and improve detection accuracy.

Monitor and maintain the health, availability, and scalability of the Splunk environment.

Perform regular platform optimization, including indexing, storage management, and search performance tuning.

Administer Splunk components (indexers, search heads, forwarders, etc.) and manage upgrades / patches.

Collaborate with stakeholders to ensure successful delivery of security monitoring capabilities.

Conduct log source and use case gap analysis to identify coverage gaps and recommend enhancements.

Work with security teams to develop new use cases aligned with evolving threat landscapes.