Cybersecurity Engineer: Splunk SIEM & Threat Hunting

tsu.edu; Richmond (VA); Sur place; USD 100 000 - 140 000; Plein temps

Résumé du poste

tsu.edu in Richmond, VA seeks a Cybersecurity Engineer focused on Splunk SIEM. You will monitor, analyze, and respond to security events, developing complex SPL queries and enabling robust threat detection across enterprise systems.

The ideal candidate brings deep experience with Splunk Enterprise/ES, incident response, and MITRE ATT&CK-based detection strategies. This onsite role supports 9-month contract work with emphasis on log analysis and compliance-ready reporting.

Qualifications

• 8+ years of cybersecurity experience in SIEM with Splunk preferred.
• Proficient in writing SPL and analyzing logs.
• Experience with threat hunting and incident analysis.
• Strong knowledge of MITRE ATT&CK and security controls.
• Ability to work onsite in Richmond, VA.

Responsabilités

• Threat Detection & Monitoring: monitor network, endpoint logs, and cloud events.
• Splunk SIEM Management: create and tune correlation searches, alerts, dashboards.
• Incident Response & Investigation: investigate incidents and coordinate remediation.
• Use Case Development: refine detection and response playbooks with threat intel.
• Log Onboarding & Integration: onboard new data sources and ensure log normalization.
• Compliance & Audit Support: gather SIEM evidence and generate reports.

Connaissances

Splunk SPL

Threat hunting

Log analysis

SIEM

Splunk Enterprise / ES

MITRE ATT&CK

Networking concepts

Cloud platforms (AWS/Azure/GCP)

Security frameworks (NIST/SOC 2/HIPAA)

Formation

Bachelor’s degree in Computer Science / Cybersecurity / IT

Outils

Splunk Enterprise

Splunk ES

Splunk SIEM tooling

Description du poste

tsu.edu in Richmond, VA seeks a Cybersecurity Engineer focused on Splunk SIEM. You will monitor, analyze, and respond to security events, developing complex SPL queries and enabling robust threat detection across enterprise systems.

The ideal candidate brings deep experience with Splunk Enterprise/ES, incident response, and MITRE ATT&CK-based detection strategies. This onsite role supports 9-month contract work with emphasis on log analysis and compliance-ready reporting.