Splunk Enterprise Security

Job description

Company : TCS Skill : **Splunk Enterprise Security** Experience : 7 to 10 Years Location : chennai, Hyderabad, Bangalore, Mumbai, Indore - Manage and administer **Splunk Enterprise Security (ES)**, including Data Models, Correlation Searches, Notable Events, Threat Intelligence Framework, Asset & Identity, and Content Management. - Design, develop, and tune **security detection use cases** aligned with the **MITRE ATT&CK** framework using SPL and Splunk ES correlation searches. - Implement and optimize **Risk-Based Alerting (RBA)**, including risk rules, risk modifiers, and detection tuning to reduce false positives and improve alert fidelity. - Onboard and normalize security data sources using **CIM**, troubleshoot data ingestion/parsing issues, and ensure data quality for security analytics. - Collaborate with SOC & security teams to enhance detection coverage, validate use cases, and support incident investigations and continuous improvement of the Splunk security platform.