Cybersecurity Engineer (Splunk)

Insight Global; Richmond (VA); On-site; USD 69,000 - 83,000; Full time

Job summary

Insight Global is seeking a Cybersecurity Engineer 3 to support and enhance a Splunk Enterprise Security environment by monitoring, detecting, investigating, and responding to cybersecurity threats across the organization.

The role emphasizes SIEM operations, threat hunting, SPL query development, incident response, log analysis, and security monitoring, with collaboration across IT teams. This is a high-impact position with a focus on protecting critical enterprise infrastructure.

Qualifications

• 8+ years of hands-on cybersecurity experience in SIEM or Splunk environments.
• 8+ years writing SPL queries.
• Strong understanding of networking, firewalls, EDR, and cloud platforms (AWS, Azure, or GCP).
• Experience with threat detection, threat hunting, and incident response.
• Knowledge of MITRE ATT&CK framework.
• Understanding of compliance standards such as NIST, HIPAA, and SOC 2.
• Splunk Enterprise Security experience is a plus.
• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field.
• Splunk Core Certified User and Splunk Core Certified Advanced Power User certifications.

Job description

Job Description

Insight Global is seeking a Cybersecurity Engineer 3 for a top public sector transportation client. This candidate will support and enhance a Splunk Enterprise Security environment by monitoring, detecting, investigating, and responding to cybersecurity threats across the organization. The ideal candidate will bring strong experience in SIEM operations, threat hunting, SPL query development, incident response, log analysis, and security monitoring. This individual will work closely with infrastructure, network, and IT teams to strengthen security visibility, onboard new log sources, improve threat detection capabilities, and ensure compliance with established security standards. This is an excellent opportunity to work on advanced cybersecurity initiatives while helping protect critical enterprise infrastructure from emerging threats. The pay rate for this role is $50-60/hr

Skills and Requirements

• 8+ years of hands-on cybersecurity experience operating, building, and investigating threats within a SIEM or Splunk environment
• 8+ years of experience writing SPL (Splunk Processing Language) queries
• Strong understanding of networking, firewalls, EDR, and cloud platforms (AWS, Azure, or GCP)
• Experience with threat detection, threat hunting, and incident response
• Knowledge of security frameworks including MITRE ATT&CK
• Understanding of compliance standards such as NIST, HIPAA, and SOC 2
• Excellent critical thinking, problem-solving, and communication skills
• Ability to operate effectively under pressure while managing multiple security tickets and incidentsBachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field
• Splunk Core Certified User certification
• Splunk Core Certified Advanced Power User certification
• Additional cybersecurity certificationsAdvanced experience with Splunk Enterprise Security

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].