Cyber Defense Analyst — Splunk & WAF Specialist (Onsite)

Insight Global; Addison (TX); On-site; USD 123,000 - 131,000; Full time

Job summary

Insight Global is seeking a Cyber Security Analyst on a 12-24 month contract to join an enterprise application security and threat detection team. You will detect, analyze, and respond to active cyber threats using advanced monitoring, log analysis, and threat intelligence capabilities.

Responsibilities include developing custom alerts and dashboards in Splunk, investigating incidents with log correlation and forensics, and collaborating with security teams and business stakeholders.

Qualifications

• 3+ years of Cyber Security, Security Operations, or Threat Detection experience.

Responsibilities

• Monitor, analyze, and respond to web application and network security events.
• Develop and implement custom alerts, dashboards, macros, and monitoring controls within Splunk.
• Investigate security incidents using log correlation, threat intelligence, and forensic analysis techniques.
• Identify and mitigate emerging threats against enterprise systems and web applications.
• Analyze web, application, network, and security logs to detect suspicious or malicious activity.
• Partner with business and security leaders to triage incidents and communicate security risks.
• Enhance existing detection capabilities and implement new controls based on threat intelligence.
• Support audit, compliance, and risk management initiatives through process and control development.
• Participate in an on-call rotation supporting active security incidents and threat response activities.

Skills

Splunk

Log Analysis

Incident Investigation

Alert Development

Dashboards

Threat Intelligence

Linux

Windows

macOS

Scripting

Regex

Networking

Independent Work

Tools

Splunk

Linux

Windows

macOS

Job description

Insight Global is seeking a Cyber Security Analyst on a 12-24 month contract to join an enterprise application security and threat detection team. You will detect, analyze, and respond to active cyber threats using advanced monitoring, log analysis, and threat intelligence capabilities.

Responsibilities include developing custom alerts and dashboards in Splunk, investigating incidents with log correlation and forensics, and collaborating with security teams and business stakeholders.