Abhishek Nanda
Splunk Certified Architect | Splunk Certified Admin | Splunk Certified Cybersecurity Defense Analyst | Splunk Developer | Splunk Certified Power & Core User | Splunk Security & ITSI | Scripting & Automation | Cloud
- Role
- Splunk Consultant at Capgemini
- Location
- Mumbai, MH, IN
- LinkedIn followers
- 500 followers
About Abhishek Nanda
Certified Splunk Enterprise Architect & Admin Expert in designing, deploying, and…
Experience
Splunk Consultant
Oct 2020 — Present · Mumbai, IN
Certified Splunk Enterprise Architect & AdminExpert in designing, deploying, and scaling Splunk architectures - Search Head Clustering, Indexer Clustering ensuring high availability and performance.* ITSI Implementation & Predictive MonitoringLed full-scale ITSI implementations created services, KPIs, adaptive thresholding, service templates, and entity rules. Built multi-KPI logic, anomaly detection, and predictive scoring for actionable service insights.* Splunk SIEM & Threat Detection FrameworksDeveloped advanced correlation searches, notable event aggregation, and risk-based alerting (RBA) mapped to MITRE ATT & CK, Kill Chain, Risk Notables for SOC enrichment.* Asset & Identity-Based Security AnalyticsMaintained asset & identity frameworks to associate logs with users/devices, enabling precision detection, contextual investigations, and enriched alerting across environments.* Security Data Onboarding & NormalizationOnboarded critical security data including firewalls (Palo Alto, Fortinet), IDS/IPS, VPNs, proxy, DNS, and endpoint logs using HEC, UF, syslog, and API integrations. Applied CIM normalization for consistent detection logic across the board.* Custom Adaptive Response Actions & Python AutomationBuilt and deployed custom Adaptive Response Actions (ARAs) for automated threat enrichment, remediation, and ticketing workflows. Created custom Splunk apps, modular inputs, Automated integration with SNOW, SCOM, and Email using Python and REST APIs to reduce MTTR and analyst workload.* CI/CD Driven DeploymentIntegrated Splunk detection content into CI/CD pipelines to automate deployment of correlation searches, lookups, and adaptive response logic—ensuring consistent, auditable, and rapid delivery across environments.* Cloud Security & Hybrid MonitoringIntegrated AWS and Azure logs for end-to-end visibility across hybrid cloud. Applied data retention, performance tuning, and cost optimization best practices for long-term scale.
Education
Guru Nanak Dev University
Computer engineering and technology
2016 — 2020
Find verified contacts for anyone on LinkedIn
Unifers gives sales teams verified emails and direct dials, enriched profiles, and outreach that lands in the inbox.
Free plan included · No credit card required
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.