Key Responsibilities

• Administer and maintain Splunk Enterprise Security (ES) environment.
  
• Manage index lifecycle, retention policies, and storage optimization
  

• Develop, optimize, and maintain correlation searches and use cases
  
• Align detections with frameworks like MITRE ATT&CK
  
• Create and enhance Splunk dashboards, reports, and alerts
  
• Integrate new log sources and data inputs ...