Bharat K.

About Bharat K.

Over 10+ years of experience in IT security engineering and architecture, with focus on leading Cyber engineering and detection teams•Experience supporting a wide range of industries including Banking, Retail, Federal, Healthcare, Insurance, Government, Consulting, and Manufacturing •Led end-to-end architecture, design, and delivery of Splunk Enterprise Security (ES) solutions for mid-size to large global enterprises.•Lead design, implementation, and operational management of Splunk SIEM platforms, aligning security monitoring with SOC operations, compliance, and business risk•Managed SIEM engineering and detection teams, providing technical direction, prioritization, and mentorship to ensure high-quality security monitoring and incident response•Oversaw end-to-end SIEM lifecycle including architecture, onboarding, detection use cases, performance optimization, and operational support•Led and coordinated SIEM migrations from legacy platforms such as ArcSight, QRadar, LogRhythm, Sentinel, and ELK to Splunk•Drove log volume optimization and performance tuning initiatives, reducing SIEM licensing costs and improving platform efficiency•Collaborated with SOC, IR, vulnerability management, IAM, and cloud teams to ensure integrated security operations• Managed implementation and ongoing support of vulnerability management tools (Rapid7, Tenable, Qualys).•Led SSO, SAML, and MFA integrations across security tools using Okta, Azure AD, Ping, SailPoint, and related platforms•Supported and managed Splunk Enterprise Security (ES) deployments for multiple customers, including detection tuning and operational readiness•Strong understanding of CIM normalization and data onboarding across multiple SIEM platforms•Experience integrating cloud-native security logs and services from AWS, Azure, and GCP into SIEM environments•Hands-on background with Splunk Cloud, Splunk On-Prem, and customer-managed cloud environments (AWS/Azure)•Strong foundation in Linux (RHEL) and enterprise security operations.Splunk certified admin Splunk certified architect Splunk enterprise security admin Securonix certified deployment engineer Azure sentinel certified training Linux Certified Engineer Cyberark certified trainings Ping identity certified trainings MITRE attack frame work certificate

Experience

1. Principal Security Consultant Splunk

   Independent Consultant

   Jan 2017 — Present · Charlotte, NC, US

   Strong security architect and experienced on capacity planning on Top leading SIEM market products for SOC scope Implemented and deployed more then 20 plus brand new SIEM solutions on various sector clients. Deep understanding of all Cloud security technologies. AWS GPC and Azure created SIEM content and security use cases on log management products based CIS controls Splunk capacity planning and build deploy new Splunk enterprise security platform for customers SIEM migrations Expert in Splunk cloud migration Manage SOC scope logs on boarding and review log types Data normalization and review Data quality checks Responsible and manage data lake and log management Splunk use case library and content build Responsible for Syslog, data collectors and Splunk platform.Review and provide security gap analysis based on security standards Export in all cloud solutions as AWS Azure And GPCData quality and SIEM checks Use case creation CIS assessments and audit.Expert in setup and configure Splunk enterprise security Splunk data models mapping to security content Splunk side Performed managed Splunk platform all aspects new/upgrades/support all components, Index cluster, SH cluster, Splunk cloud, multisite, ES deployment all.implemented Xsoar and SIEM automation orchestra for new implementations

Education

• The City University of New York

  MS, computer Science