Coders Brain is a global leader in it services, digital and business solutions that partners with its clients to simplify, strengthen and transform their businesses. We ensure the highest levels of certainty and satisfaction through a deep-set commitment to our clients, comprehensive industry expertise and a global network of innovation and delivery centers.

We achieved our success because of how successfully we integrate with our clients.

Coders Brain Technology Pvt. Ltd.

<div style="text-align: center;"><strong style="color: black;">Skillset</strong></div><div style="text-align: center;"><strong style="color: black;">Splunk Content Developer</strong></div><div style="text-align: center;"><strong style="color: black;">Experience</strong></div><div style="text-align: center;"><strong>7 to 12 Years (Relevant Experience only)</strong></div><div style="text-align: center;"><strong style="color: black;">Location</strong></div><div style="text-align: center;"><strong><u>PAN India</u></strong></div><div style="text-align: center;"><strong style="color: black;">Notice Period</strong></div><div style="text-align: center;"><strong>Immediate Joiners Only</strong></div><div style="text-align: center;"><strong style="color: black;">Client</strong></div><div style="text-align: center;"><strong>LTI</strong></div><div style="text-align: center;"><br></div><div><br></div><div><strong style="color: black;">Roles and Responsibilities:</strong></div><div><span style="color: black;">•&nbsp;</span><strong style="color: black;">Creating and implementing new threat detection content, rules and use cases to deploy in SIEM platform with different data sets like Proxy, VPN, Firewall, DLP, etc.</strong></div><div><span style="color: black;">• Assisting with process development and process improvement for Security Operations to include creation/modification of SOPs, Playbooks, and Work instructions.</span></div><div><span style="color: black;">• Developing custom content based on threat intelligence and threat hunting results.</span></div><div><span style="color: black;">• Identifying gaps in the existing security controls and develop/propose new security controls.</span></div><div><span style="color: black;">• SIEM Engineering and knowledge of integrating various log sources with any SIEM platform.</span></div><div><span style="color: black;">• Custom parsing of logs being ingested into the SIEM Platform</span></div><div><br></div><div><span style="color: black;">Job Requirements:</span></div><div><span style="color: black;">• 3</span><strong style="color: black;">+ years of experience working in the field of Content development and experience in delivering and/or building content on any of the SIEM tools like Splunk/ArcSight /QRadar/Nitro ESM/etc.</strong></div><div><span style="color: black;">•&nbsp;</span><strong style="color: black;">Deep understanding of MITRE ATT&amp;CK Framework.</strong></div><div><span style="color: black;">• Experience in SOC Incident analysis with an exposure to information security technologies such as Firewall, VPN, Intrusion detection tools, Malware tools, Authentication tools, endpoint technologies, EDR and cloud security tools.</span></div><div><span style="color: black;">• Good understanding on networking concepts.</span></div><div><span style="color: black;">• Experience interpreting, searching, and manipulating data within enterprise logging</span></div><div><span style="color: black;">solutions (e.g. SIEM, IT Service Management (ITSM) tools, workflow, and automation)</span></div><div><span style="color: black;">• In depth knowledge of security data logs and an ability to create new content on advanced security threats on a need basis as per Threat Intelligence.</span></div><div><span style="color: black;">• Ability to identify gaps in the existing security controls.</span></div><div><span style="color: black;">• Good experience in writing queries/rules/use cases for security analytics (ELK, Splunk or any other SIEM platform) and deployment of content.</span></div><div><span style="color: black;">• Experience on EDR tools like Crowdstrike and good understanding on TTPs like Process Injection.</span></div><div><span style="color: black;">• Excellent communication, listening &amp; facilitation skills</span></div><div><span style="color: black;">• Ability to demonstrate an investigative mindset.</span></div><div><span style="color: black;">• Excellent problem-solving skills.</span></div><div><br></div><div><span style="color: black;">Preferred:</span></div><div><span style="color: black;">- Understanding of MITRE ATT&amp;CK framework.</span></div><div><span style="color: black;">- Demonstrable experience in Use case /rule creation on any SIEM Platform.</span></div><div><span style="color: black;">- Chronicle Backstory/ YARA / Crowdstrike rules is a plus."</span></div><div><br></div><div><br></div>