Balakrishna S Email & Phone Number

Dubai, United Arab Emirates

Dubai, United Arab Emirates

Dubai, United Arab Emirates

Saudi Arabia

Leading Detection Engineering Team to work closely with Cyber Security Center to create & fine tune security monitoring use cases and also maintaining the Splunk infrastructure by guiding the team.+ Responsible for incidents, demands and prioritize the work correctly and allocate to the team.+ Managing day to day operations.+ Continuous Process Improvement / Managing change in a dynamic Organization.+ Coordinate with Threat Hunting, Threat Intelligence, Incident Response and Risk management teams to implement use cases using MITRE framework+ Promoting Knowledge Sharing and Collaboration.+ Responsible for Stability of Splunk infrastructure+ Migrating use cases from Dell Secure Works to Splunk.+ Developed Splunk monitoring app+ Reduce License and disk Consumption + Identify and fix Splunk Error's/Warnings+ CIM compliance and documentation.+ Upgrading Add-on's, Apps and Clusters.+ Migrate single site indexer Cluster to Multisite+ Gather use case requirements from different teams/SME's and implement in Splunk.+ Create ES Correlation Searches for CSC monitoring+ Coordinate with Incident Response team and SME's to fine-tune correlation searches to reduce the false positives

Bengaluru, Karnataka, India

Worked with multiple customers to deploy and improve their Splunk environments ranging from 300GB to 14 TB ingestion per day. Developed Splunk environment monitoring app by creating alerts, reports and dashboards which helps the admin's to identify the issue and fix them.Cisco Systems - Business Critical Services(BCS)May 2018 – Jan 2019Worked in BCS Splunk environment with more than 250+ Splunk components with the below responsibilities.+ Administrating 15+ Indexer clusters on AWS and On-premise+ Troubleshooting L4 issues+ Creating alerts, reports and dashboards to gain more insights on the Splunk environment+ Upgrading Indexer Cluster, Search Head Cluster and other components+ Optimizing the environment by implementing the best practices+ Infrastructure Planning, Architecture Designing and deploying SplunkMercedes Benz - Security Audit Log Monitoring(SALM)Feb 2019 – Aug 2019 & March 2020 - June 2020Collecting data from different security devices across 100+ locations(Splunk environments) and monitoring 100+ splunk environments(800+ Splunk components) across the globe.+ Create alerts, reports and dashboards to monitor splunk environment health from a single data center.+ Deploy Splunk using Ansible.+ On-board different log source's in to Splunk and perform CIM compliance+ Configure Splunk best Practices+ Upgrade Splunk Add-on's, Apps and Splunk Env.+ Review deployed Splunk environments to identify and fix the issues.+ Splunk DB connect+ Tuning Enterprise Security app performance with best practices.Splunk Inc - Professional Services Consultant & On-Demand EngineerSept 2019 – Jun 2020Splunk specializations include but not limited to:+ Engage with all levels of business including project, infrastructure and service teams on potential impact of proposed project.+ Architecting and designing a Splunk implementation+ Set up meeting with customers regarding any adoption activity and assist customer with best practices approach to adoption

Bangalore

Bangalore