Rajin Durbal

I’m a Splunk Engineer and Security Professional with 10 years of experience designing, deploying, and optimizing SIEM solutions in federal environments. I focus on Splunk architecture, data onboarding, and performance tuning, so teams can detect threats faster and operate with confidence.

At Booz Allen Hamilton, I led Splunk initiatives across multiple government agencies, deploying Search Apps, Technical Add Ons, and enforcing strong data quality. I supported complex escalations, coached cross-functional teams, and improved operational delivery through continuous refinement of the platform.

I’ve hands-on automated security workflows and tightened detection performance. I updated legacy Splunk code by moving Python 2.7 to 3.9, resolved query limitations, and split workloads to reduce RAM load—then deployed tailored Splunk add-ons for Tenable, Cisco ISE, Tanium, Forescout, Bigfix, Carbonblack, Qualys, Microsoft Defender, and Microsoft Intune to match our data models and metrics.

Previously, as a Security Operations Analyst at Customer Value Partners, I built Splunk architecture from scratch—Search Heads, Indexers, Heavy Forwarders, License Master, and Deployment Servers—while creating dashboards, alerts, reports, and SAML/Active Directory access. I also automated vulnerability scan workflows (Tenable.sc logs into ticketing), reduced alert notification time from 12 hours to minutes, and trained new hires on runbooks and SOC processes. I bring a compliance mindset aligned to NIST standards, strengthened by Splunk certifications and cloud/security-focused education.