•
Administered and maintained Splunk Cloud, managing forwarders, deployment servers and ensuring high availability
•
Designed, deployed, and optimized Splunk Cloud dashboards, correlation searches, and alerts to support incident detection and response
•
Managed large- scale data ingestion pipelines, ensuring accurate parsing, indexing, and normalization for diverse log sources
•
Tuned and optimized SPL queries to improve search performance, reduce latency, and enhance reporting accuracy
•
Integrated multiple security data sources (firewalls, endpoints, threat intel feeds) into Splunk Cloud for unified visibility
•
Implemented role- based access controls and ensured secure administration of Splunk Cloud environments
•
Conducted forensic investigations leveraging Splunk Cloud data to trace attack vectors and reconstruct incident timelines
•
Ensured compliance alignment (ISO, IRDAI) by building audit- ready reports and dashboards in Splunk Cloud
•
Collaborated with MSSP partners to validate Splunk Cloud monitoring, enforce SLA compliance, and drive accountability
•
Mentored SOC analysts on Splunk Cloud usage, query building, and dashboard creation to enhance team capabilities
•
Delivered executive- ready reports and visualizations from Splunk Cloud, translating technical findings into business impact