Cybersecurity Engineer

Cybersecurity Jobs; Richmond (VA); On-site; USD 130,000 - 170,000; Full time

Job summary

Skywalk Global is seeking a Cybersecurity Engineer in Richmond, VA onsite to strengthen the organization’s cyber defense program through advanced monitoring, detection, and incident support. This onsite role focuses on Splunk Enterprise Security usage to monitor, detect, analyze, and respond to security events.

You will work with IT and network teams to ensure data sources are onboarded, dashboards and alerts tuned, and security controls audited for compliance with internal policies and

Qualifications

• 8+ years of hands-on cybersecurity experience focusing on operating, building, and investigating threats within a SIEM environment, specifically Splunk.
• Strong critical thinking, problem-solving, and communication skills under pressure.
• Proficiency in SPL (Splunk Processing Language).
• Working knowledge of networking, firewalls, EDR, and cloud platforms (AWS/Azure/GCP).
• Familiarity with MITRE ATT&CK and compliance standards like NIST/HIPAA/SOC 2.

Responsibilities

• Continuously monitor network traffic, endpoint logs, and cloud security events to identify anomalies and incidents.
• Create, maintain, and tune Splunk correlation searches, alerts, and dashboards to reduce false positives and improve detection quality.
• Investigate potential security incidents, preserve forensic evidence, and coordinate with IT and network teams to remediate threats.
• Develop and refine detection and response playbooks using threat intelligence and MITRE ATT&CK framework.
• Onboard new data sources with infrastructure teams ensuring log integrity and normalization for the SIEM platform.
• Support audit readiness by collecting SIEM control evidence and producing compliance reports.

Skills

Splunk SIEM

Splunk Enterprise Security

SPL (Splunk Processing Language)

MITRE ATT&CK

Threat analysis

Networking

Cloud platforms

Education

Bachelor’s degree in Computer Science, Cybersecurity, IT, or related field

Tools

AWS

Azure

GCP

EDR

Job description

Skywalk Global is seeking a Cybersecurity Engineer to strengthen the organization’s cyber defense program through advanced monitoring, detection, and incident support. In this Richmond, VA onsite role, you will help ensure systems are deployed successfully and built to specification while supporting Splunk SIEM capabilities using Splunk Enterprise Security to monitor, detect, analyze, and respond to security events.

What you’ll do

• Continuously monitor network traffic, endpoint logs, and cloud security events to identify anomalous behavior and potential incidents.
• Create, maintain, and tune Splunk correlation searches, alerts, and dashboards to reduce false positives and improve detection quality.
• Investigate potential security incidents, preserve and follow forensic evidence, and coordinate with IT and network teams to remediate threats.
• Develop and refine detection and response playbooks using threat intelligence and frameworks such as MITRE ATT&CK.
• Partner with infrastructure teams to onboard new data sources, ensuring log integrity, parsing, and normalization across the SIEM platform.
• Support audit readiness by collecting SIEM control evidence and producing compliance reports aligned to internal policies and standards.

Required experience and qualifications

• 8+ years of hands-on cybersecurity experience, focused on operating, building, and investigating threats within a SIEM environment, specifically Splunk.
• Strong critical thinking, problem-solving, and communication skills, with the ability to remain calm under pressure while handling multiple security tickets.
• Proficiency in SPL (Splunk Processing Language).
• Working knowledge of networking, firewalls, EDR, and cloud platforms including AWS, Azure, or GCP.
• Knowledge of security frameworks such as MITRE ATT&CK and compliance standards including NIST, HIPAA, or SOC 2.
• A Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.

Skills and tools

• Splunk SIEM and Splunk Enterprise Security
• SPL (Splunk Processing Language)
• Splunk correlation searches, alerts, and dashboards
• MITRE ATT&CK
• AWS, Azure, GCP
• EDR
• NIST, HIPAA, SOC 2