Role Purpose
The purpose of this role is to analyse, identify, rectify & recommend specific improvement measures that help in the security posture of the organization by protecting the sensitive information
SOAR Developer JD-
Client looking for a strong playbook developer resource for XSOAR/Splunk Phantom/Splunk SOAR who has SOC/CSIRT practical experience along with technical skills for developing playbooks. The resource would be helping to develop playbooks for our existing requirements and also work more directly with our analysts to leveraging their SOC/CSIRT experience to help come up with the best solution to solve the business need. This may require influencing process change on the SOC side to provide the best solution to meet their needs.
Looking for well experienced (5+ yrs) XSOAR developer who understand SOC use cases and develop new playbook automations and work on enhancement requests.
Palo XSOAR playbook development, Security Incident Response, SOC operations
2. Operation Manger- splunk
JD-

We are seeking an experienced Operations Manager to oversee and optimize our daily operations. The Operations Manager will be responsible for ensuring that our business processes run smoothly and efficiently, coordinating between various departments, managing resources, and driving continuous improvement initiatives. The ideal candidate will have strong leadership skills, a deep understanding of operational processes, and the ability to implement strategies that enhance productivity and profitability.

Key Responsibilities:
– Operations Management:
– Oversee the day-to-day operations of the organization, ensuring that all processes are running efficiently and effectively.
– Monitor key performance indicators (KPIs) to identify areas for improvement and implement strategies to enhance productivity.
– Coordinate between departments (e.g., production, logistics, customer service) to ensure seamless operations and the timely delivery of products or services.

– Resource Management:
– Manage and allocate resources (e.g., personnel, equipment, budget) to optimize operational efficiency and meet organizational goals.
– Develop and implement resource management plans to address current and future operational needs.

3. Splunk Content Developer L3
JD-
Content Development:
– Design and develop custom dashboards, reports, and alerts within Splunk to meet the needs of various business units, including IT operations, security, and business intelligence.
– Create and optimize complex SPL queries to extract meaningful data and insights.
– Develop and maintain data models, saved searches, and macros to streamline content creation and improve performance.

– Requirement Gathering:
– Work closely with stakeholders to understand their needs and translate business and technical requirements into effective Splunk content.
– Collaborate with cross-functional teams to ensure the content aligns with organizational goals and objectives.

4. Splunk Analyst
JD

The Splunk Analyst will be responsible for the design, implementation, and maintenance of Splunk solutions. This role involves working with large datasets, creating dashboards, alerts, and reports to provide actionable insights, and supporting the organization’s IT security, compliance, and operational monitoring needs.

Key Responsibilities:
– Data Onboarding & Management:
– Collect, monitor, and analyze data from various sources by configuring and deploying Splunk forwarders and ingesting data into the Splunk platform.
– Optimize Splunk data models and indexes for performance.
– Ensure data integrity, proper parsing, and normalization of data.

– Dashboard & Report Development:
– Design, develop, and maintain Splunk dashboards, alerts, and reports to provide insights into system performance, security events, and operational metrics.
– Collaborate with stakeholders to gather requirements and tailor reports/dashboards to meet business needs.

– Monitoring & Alerting:
– Implement and fine-tune Splunk alerts to proactively monitor for security incidents, performance issues, and anomalies.
– Conduct regular system health checks to ensure the stability and performance of the Splunk environment.

– Troubleshooting & Support:
– Investigate and resolve issues with Splunk performance, data ingestion, and search/query errors.
– Provide support to end-users, helping them to use Splunk effectively
SOAR Tools