Cybersecurity Engineer

We are looking for a highly analytical Cybersecurity Engineer to build, maintain, and optimize our Splunk SIEM ecosystem. In this position, you will defend infrastructure by monitoring threats, hunting anomalies, and managing incident responses in real time.

Position Details

• Work Arrangement: 100% Onsite
• Location: Richmond, VA 23219
• Interview Process: In-Person Only
• Shift: EST

Core Responsibilities

• Threat Detection: Monitor network traffic, endpoint logs, and cloud security events for threats.
• Splunk SIEM Optimization: Write and tune SPL queries, correlation searches, and alerts to reduce false positives.
• Incident Response: Lead investigations, track forensic evidence, and collaborate to remediate security issues.
• Data Onboarding: Work with IT teams to integrate, parse, and normalize new log sources into Splunk.
• Playbook & Audit Support: Build threat playbooks (MITRE ATT&CK) and collect compliance control evidence (NIST/SOC 2).

Key Requirements

• 8+ years of hands-on experience in Cybersecurity and SIEM/Splunk operations.
• Advanced proficiency in SPL (Splunk Processing Language).
• Deep understanding of Networking, Firewalls, EDR, and Cloud (AWS/Azure/Google Cloud Platform).
• Solid experience with frameworks like MITRE ATT&CK, NIST, HIPAA, or SOC 2.
• Bachelor's Degree in Computer Science, IT, Cybersecurity, or a related field.
• Preferred: Splunk Core Certified User / Advanced Power User certifications.