Cyber Security Analyst (splunk/WAF)

Insight Global; Addison (TX); On-site; USD 123,000 - 131,000; Full time

Job summary

Insight Global is seeking a Cyber Security Analyst on a 12-24 month contract to join an enterprise application security and threat detection team. You will detect, analyze, and respond to active cyber threats using advanced monitoring, log analysis, and threat intelligence capabilities.

Responsibilities include developing custom alerts and dashboards in Splunk, investigating incidents with log correlation and forensics, and collaborating with security teams and business stakeholders.

Qualifications

• 3+ years of Cyber Security, Security Operations, or Threat Detection experience.

Responsibilities

• Monitor, analyze, and respond to web application and network security events.
• Develop and implement custom alerts, dashboards, macros, and monitoring controls within Splunk.
• Investigate security incidents using log correlation, threat intelligence, and forensic analysis techniques.
• Identify and mitigate emerging threats against enterprise systems and web applications.
• Analyze web, application, network, and security logs to detect suspicious or malicious activity.
• Partner with business and security leaders to triage incidents and communicate security risks.
• Enhance existing detection capabilities and implement new controls based on threat intelligence.
• Support audit, compliance, and risk management initiatives through process and control development.
• Participate in an on-call rotation supporting active security incidents and threat response activities.

Skills

Splunk

Log Analysis

Incident Investigation

Alert Development

Dashboards

Threat Intelligence

Linux

Windows

macOS

Scripting

Regex

Networking

Independent Work

Tools

Splunk

Linux

Windows

macOS

Job description

Job Description: 12-24 month contract - onsite 4 days/week - $89-$95/hr

We are seeking a Cyber Security Analyst to join an enterprise application security and threat detection team responsible for identifying, analyzing, and responding to active cyber threats. This individual will leverage advanced monitoring, log analysis, and threat intelligence capabilities to detect malicious activity, investigate security events, and enhance security controls across the organization.

The ideal candidate has hands-on experience analyzing web application security events, developing alerting and detection mechanisms, and utilizing Splunk to identify and mitigate threats. This role operates on the front lines of cybersecurity defense and requires the ability to work independently while collaborating with security teams and business stakeholders.

This team will partner closely with the Threat Hunting team, while this team is monitoring and managing the alerting

Schedule: 4 days X 10 hours

• Flexible start time, any time from 7:00 am to 9:00 am

Two Shift Schedules:

• Wednesday - Saturday (4 days onsite)
• Sunday - Wednesday (4 days onsite)

Key Responsibilities

• Monitor, analyze, and respond to web application and network security events.
• Develop and implement custom alerts, dashboards, macros, and monitoring controls within Splunk.
• Investigate security incidents using log correlation, threat intelligence, and forensic analysis techniques.
• Identify and mitigate emerging threats against enterprise systems and web applications.
• Analyze web, application, network, and security logs to detect suspicious or malicious activity.
• Partner with business and security leaders to triage incidents and communicate security risks.
• Enhance existing detection capabilities and implement new controls based on threat intelligence.
• Support audit, compliance, and risk management initiatives through process and control development.
• Participate in an on-call rotation supporting active security incidents and threat response activities.

Must Have Qualification:

• 3+ years of Cyber Security, Security Operations, or Threat Detection experience
• 1+ year of hands-on Web Application Firewall (WAF) experience
• Strong intrusion analysis and incident investigation background
• Advanced Splunk experience, including: Log analysis, Dashboard creation, Alert development, Macro creation
• Ability to identify and interpret web application and security logs from a security perspective.
• Strong understanding of current cyber threats, attack techniques, and common exploits.
• Experience with Linux, Windows, and macOS operating systems.
• Experience with scripting languages and regular expressions.
• Strong knowledge of networking fundamentals and common network protocols.
• Ability to work independently in a fast-paced Security Operations environment.