Capgemini is seeking a skilled Splunk Administrator to enhance enterprise-scale SIEM and security monitoring environments. This role offers a chance to shape your career within a global community focused on reimagining technological possibilities. Join us in empowering leading organizations to unlock the full potential of technology for a more sustainable and inclusive world.

This position is ideal for professionals with 4-9 years of experience in Splunk Administration, Splunk Enterprise/Cloud, Log Management, SIEM, Data Onboarding, and Dashboard Development, and is open to candidates across India.

Key responsibilities include designing, developing, and maintaining Splunk Enterprise Security (ES) use cases, alerts, and dashboards. You will be instrumental in enhancing threat detection through advanced log analysis and tuning, integrating diverse data sources, and collaborating with SOC teams to refine incident response processes.

Furthermore, you will implement automation to streamline security operations and create essential technical documentation. This role involves working with cross-functional stakeholders to deliver robust SIEM and cybersecurity solutions.

A strong foundation in Splunk Enterprise Security (ES) is essential, along with proven experience in developing complex incident detection and response use cases. Expertise in log analysis, normalization, parser creation, custom log onboarding, and advanced security analytics queries is critical.

Candidates should possess significant experience with SIEM platforms and demonstrate strong skills in Splunk Administration, Security Use Case Development, and Security Monitoring. Excellent knowledge of SPL, KQL, and SQL-based query languages is also required.