Cyber Security Engineer

Role Overview

We are seeking an experienced Cybersecurity Engineer (Splunk SIEM) to strengthen enterprise security operations through proactive threat detection, SIEM engineering, incident response, and security monitoring. The ideal candidate will have deep expertise with Splunk Enterprise Security, threat hunting, log analysis, security frameworks, and cloud security technologies to protect critical enterprise infrastructure.

This opportunity is based in Richmond, VA. The job is open to candidates within a 100-mile radius of Richmond, VA.

Key Responsibilities

• Monitor, detect, and respond to cybersecurity threats using Splunk Enterprise Security.

• Develop, maintain, and optimize Splunk correlation searches, dashboards, and alerts.

• Perform incident investigation, threat hunting, and forensic analysis.

• Create and enhance SIEM use cases, detection rules, and response playbooks.

• Integrate and normalize log sources across enterprise infrastructure.

• Support compliance reporting, audit readiness, and security control validation.

• Collaborate with infrastructure, networking, and security teams to improve detection capabilities.

• Analyze security events across network, endpoint, and cloud environments.

Required Skills (with Years)

• Splunk SIEM Engineering & Security Operations – 8+ years

• Splunk Processing Language (SPL) – 8+ years

• Threat Hunting & Incident Response – 8+ years

• Log Analysis & SIEM Use Case Development – 8+ years

• Networking, Firewalls, EDR & Cloud Security (AWS/Azure/Google Cloud Platform) – 8+ years

• Security Frameworks (MITRE ATT&CK, NIST, HIPAA, SOC 2) – 8+ years

• Cybersecurity Operations & Threat Investigation – 8+ years

Preferred Skills

• Splunk Enterprise Security Administration

• SIEM Log Integration & Normalization

• Security Compliance & Audit Support

• Digital Forensics

• Security Monitoring & Detection Engineering

Preferred Certifications

• Splunk Core Certified User

• Splunk Core Certified Advanced Power User

• CompTIA Security+

• GIAC Certified Incident Handler (GCIH)

• Certified Information Systems Security Professional (CISSP)