Cyber Security Engineer

Skill: Splunk

Experience Range: 5+ years

Joining Location: PAN India

We are currently planning to do a Walk-In Interview on 22nd November 2025 at TCS Chennai.

WALK IN DATE – 22nd November 2025 (Saturday)

WALK IN LOCATION - Chennai/ Bangalore/ Hyderabad

Job Description:

Required Skills

- Strong understanding of log management and SIEM concepts. - Proficiency in log source onboarding, parsing, and CIM compliance. - Experience in content development (correlation rules, dashboards, alerts) and tuning. - Solid troubleshooting skills for both Splunk platform and security content. - Experience with Splunk administration, deployment, and health monitoring. - Familiarity with SIEM optimization techniques and best practices. - Ability to conduct gap analysis and develop actionable recommendations. - Excellent communication and documentation skills. - Relevant certifications (e.g., Splunk Certified Admin, Splunk Certified Architect) are a plus.

Good-to-Have:

- Splunk Certified Admin, Splunk Certified Architect) are a plus.

Roles and Responsibilities:

- Implement and configure Splunk SIEM solutions tailored to organizational security requirements. - Onboard diverse log sources into Splunk, ensuring data is parsed and normalized according to the Common Information Model (CIM). - Develop and maintain data models, field extractions, and event parsing logic. - Design, develop, and tune detection rules, correlation searches, dashboards, and alerts. - Continuously optimize content to reduce false positives and improve detection accuracy. - Monitor and maintain the health, availability, and scalability of the Splunk environment. - Perform regular platform optimization, including indexing, storage management, and search performance tuning. - Administer Splunk components (indexers, search heads, forwarders, etc.) and manage upgrades/patches. - Collaborate with stakeholders to ensure successful delivery of security monitoring capabilities. - Conduct log source and use case gap analysis to identify coverage gaps and recommend enhancements. - Work with security teams to develop new use cases aligned with evolving threat landscapes.