Cyber Security Analyst (Splunk/WAF)

Insight Global; Charlotte (NC); On-site; USD 255,021,000 - 272,214,000; Full time

Job summary

Insight Global is seeking a Cyber Security Analyst for a 12-24 month on-site contract in Charlotte, NC. The role focuses on enterprise application security and threat detection, leveraging Splunk for monitoring, alerting, and incident response.

The ideal candidate will have 3+ years in security operations, 1+ year in WAF, strong incident investigation skills, and hands-on Splunk expertise to identify and mitigate threats across web apps and networks.

Qualifications

• 3+ years of Cyber Security, Security Operations, or Threat Detection experience.
• 1+ year of hands-on Web Application Firewall (WAF) experience.
• Advanced Splunk experience: Log analysis, Dashboard creation, Alert development, Macro creation.
• Experience with Linux, Windows, and macOS operating systems.
• Strong scripting abilities and regular expressions.

Responsibilities

• Monitor, analyze, and respond to web application and network security events.
• Develop and implement custom alerts, dashboards, macros, and monitoring controls within Splunk.
• Investigate security incidents using log correlation, threat intelligence, and forensic analysis techniques.
• Identify and mitigate emerging threats against enterprise systems and web applications.
• Analyze web, application, network, and security logs to detect suspicious activity.
• Triage incidents with business and security leaders and communicate risks.
• Enhance detection capabilities and implement new controls based on threat intel.
• Support audit, compliance, and risk management initiatives through process and control development.
• Participate in an on-call rotation supporting active security incidents and threat response activities.

Skills

Cyber Security

Threat Detection

Incident Investigation

Log Analysis

On-call coordination

Tools

Splunk

Job description

Job Description: 12-24 month contract - onsite 4 days/week - $89-$95/hr

We are seeking a Cyber Security Analyst to join an enterprise application security and threat detection team responsible for identifying, analyzing, and responding to active cyber threats. This individual will leverage advanced monitoring, log analysis, and threat intelligence capabilities to detect malicious activity, investigate security events, and enhance security controls across the organization.

The ideal candidate has hands-on experience analyzing web application security events, developing alerting and detection mechanisms, and utilizing Splunk to identify and mitigate threats. This role operates on the front lines of cybersecurity defense and requires the ability to work independently while collaborating with security teams and business stakeholders.

This team will partner closely with the Threat Hunting team, while this team is monitoring and managing the alerting

Schedule: 4 days X 10 hours

• Flexible start time, any time from 7:00 am to 9:00 am

Two Shift Schedules:

• Wednesday - Saturday (4 days onsite)
• Sunday - Wednesday (4 days onsite)

Key Responsibilities

• Monitor, analyze, and respond to web application and network security events.
• Develop and implement custom alerts, dashboards, macros, and monitoring controls within Splunk.
• Investigate security incidents using log correlation, threat intelligence, and forensic analysis techniques.
• Identify and mitigate emerging threats against enterprise systems and web applications.
• Analyze web, application, network, and security logs to detect suspicious or malicious activity.
• Partner with business and security leaders to triage incidents and communicate security risks.
• Enhance existing detection capabilities and implement new controls based on threat intelligence.
• Support audit, compliance, and risk management initiatives through process and control development.
• Participate in an on-call rotation supporting active security incidents and threat response activities.

Must Have Qualification:

• 3+ years of Cyber Security, Security Operations, or Threat Detection experience
• 1+ year of hands-on Web Application Firewall (WAF) experience
• Strong intrusion analysis and incident investigation background
• Advanced Splunk experience, including: Log analysis, Dashboard creation, Alert development, Macro creation
• Ability to identify and interpret web application and security logs from a security perspective.
• Strong understanding of current cyber threats, attack techniques, and common exploits.
• Experience with Linux, Windows, and macOS operating systems.
• Experience with scripting languages and regular expressions.
• Strong knowledge of networking fundamentals and common network protocols.
• Ability to work independently in a fast-paced Security Operations environment.