Cyber Security Analyst: SIEM, EDR & Splunk (Contract)

Global Technical Talent, an Inc. 5000 Company; Raleigh (NC); Presencial; USD 146 000 - 165 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Medical, Vision, and Dental Insurance

401k Retirement Fund

Resumo da oferta

Global Technical Talent is seeking a Cyber Security Analyst for an onsite Raleigh contract. The role focuses on logging and monitoring, MRA remediation, and reviewing 300 applications for standards and security tool assessments.

You will analyze events from SIEM/EDR, enhance detection strategies, and collaborate with IT teams to close gaps. Strong Splunk skills and security tooling experience are essential for success.

Qualificações

• Proven experience in detection engineering within cybersecurity operations.
• Strong proficiency with Splunk and SIEM/EDR tooling.
• Familiarity with MITRE ATT&CK framework.
• Excellent communication and ability to guide application owners through requirements.

Responsabilidades

• Perform in-depth analysis of security events and detections from SIEM and EDR platforms.
• Review and recommend improvements to security policies and detection strategies.
• Assist with log onboarding for critical applications, ensuring proper field capture and normalization.
• Utilize Splunk to locate logs, assess data sparsity, and validate normalization.
• Collaborate with IT teams and application owners to identify gaps and implement detection enhancements.
• Apply MITRE ATT&CK framework to strengthen detection coverage and threat modeling.
• Document findings, recommendations, and detection logic clearly and concisely.

Conhecimentos

Detection engineering

Splunk

Threat detection

SIEM/EDR analysis

MITRE ATT&CK

Communication

Formação académica

CISSP

GIAC

Splunk Certified Power User

Ferramentas

Splunk

CrowdStrike

UEBA

Database monitoring

Descrição da oferta de emprego

Global Technical Talent is seeking a Cyber Security Analyst for an onsite Raleigh contract. The role focuses on logging and monitoring, MRA remediation, and reviewing 300 applications for standards and security tool assessments.

You will analyze events from SIEM/EDR, enhance detection strategies, and collaborate with IT teams to close gaps. Strong Splunk skills and security tooling experience are essential for success.