Senior Cybersecurity Engineer — Splunk SIEM & Threat Detection (Onsite, Richmond)

Cybersecurity Jobs; Richmond (VA); On-site; USD 115,000 - 150,000; Full time

Job summary

BranCore Technologies is seeking a Cybersecurity Engineer 3 to support a Splunk SIEM program focused on monitoring, detection, analysis, and response to security events. This fully onsite contract role is based in the Richmond, VA area, where you will help improve detection quality, ensure SIEM data integration, and support compliance reporting.

You’ll monitor threats, create Splunk correlation searches and dashboards, investigate incidents, and develop playbooks with MITRE ATT&CK guidance.

Qualifications

• 8+ years of hands-on cybersecurity experience in SIEM, Splunk, or similar
• Proficiency with SPL (Splunk Processing Language)
• Understanding of networking, firewalls, EDR, and cloud platforms (AWS/Azure/GCP)
• Familiarity with frameworks like MITRE ATT&CK and standards such as NIST/HIPAA/SOC 2
• Bachelor’s degree required
• Certifications such as Splunk Core Certified User/Advanced Power User are highly preferred

Responsibilities

• Monitor network, endpoint, and cloud security events to identify incidents
• Create and tune Splunk correlation searches, alerts, and dashboards
• Investigate incidents and coordinate remediation with IT teams
• Develop detection and response playbooks using threat intelligence
• Onboard new data sources and ensure log integrity across the SIEM
• Support audit readiness with SIEM control evidence and reports

Skills

Splunk

SPL

8+ years

MITRE ATTACK

NIST

HIPAA

SOC 2

Cloud platforms

Communication

Education

Bachelor’s degree in CS/Cybersecurity/IT

Tools

Splunk

Splunk Enterprise Security

Job description

BranCore Technologies is seeking a Cybersecurity Engineer 3 to support a Splunk SIEM program focused on monitoring, detection, analysis, and response to security events. This fully onsite contract role is based in the Richmond, VA area, where you will help improve detection quality, ensure SIEM data integration, and support compliance reporting.

You’ll monitor threats, create Splunk correlation searches and dashboards, investigate incidents, and develop playbooks with MITRE ATT&CK guidance.