Splunk Engineer (Security and Observability)

ResourceTree Global Services is hiring a Splunk Engineer in Bangalore to work where security detection meets operational monitoring. You will run Splunk Enterprise and Enterprise Security, write the searches that catch threats, and build the dashboards that tell infrastructure and DevOps teams whether services are healthy.

What you would work on

• Deploying, managing and tuning Splunk Enterprise, Splunk Cloud and Enterprise Security

• Writing advanced SPL queries, correlation searches and alerts

• Building threat detection use cases mapped to MITRE ATT&CK

• Configuring data ingestion, parsing, enrichment, CIM, field extractions and data models

• Creating dashboards for infrastructure, application and service health

• Working with SOC, infrastructure, DevOps and engineering teams

What they are looking for

• 5 to 7 years of relevant experience with hands-on Splunk

• Good understanding of threat hunting and incident response

• Experience with firewalls and EDR tools

• Python, PowerShell or Bash for automation

• Splunk certifications are an advantage

Role details

• Location: Bangalore (in office)

• Shift: 4:30 PM to 1:30 AM IST

• Immediate joiners preferred

• Email subject: Splunk Engineer, Bangalore, and mention your notice period