Senior Splunk Cybersecurity Analyst (Threat Hunting)

Stefanini North America and APAC; Atlanta (GA); On-site; USD 90,000 - 130,000; Full time

Job summary

Stefanini Group is seeking a Cyber Security Analyst with strong Splunk Enterprise / Splunk Enterprise Security experience to monitor, investigate, and respond to cyber threats within a banking/financial services environment. The role emphasizes threat-alert triage, incident investigation, threat hunting, and security monitoring across critical systems.

Responsibilities include monitoring Splunk alerts, investigating suspicious activity, writing SPL queries, and mapping detections to MITRE ATT&CK

Qualifications

• 5+ years of cybersecurity operations, SOC monitoring, or incident response.
• Hands-on experience with Splunk and SPL query development.
• Experience in banking, financial services, payments, fintech, or regulated environments.
• Knowledge of financial-sector risks, including fraud and data protection.
• Strong experience with Splunk Enterprise Security and SPL searches.
• Familiarity with Windows/Linux, network security, IAM, EDR, cloud security, and IR processes.
• Strong analytical, documentation, communication, and alert-prioritization skills.

Responsibilities

• Monitor and triage Splunk notable events, correlation searches, dashboards, and risk-based alerts.
• Investigate suspicious authentication, privileged-account activity, malware, phishing, ransomware, and data exfiltration.
• Write and optimize SPL queries for alert investigation, event correlation, and threat hunting.
• Analyze logs from SIEM, EDR, firewalls, VPN, identity platforms, cloud services, applications, and banking systems.
• Validate true/false positives, prioritize alerts by risk, and escalate incidents per SOC procedures.
• Develop and tune Splunk correlation searches, dashboards, reports, and detection rules.
• Support incident response, root-cause analysis, evidence preservation, and post-incident reporting.
• Map threats to MITRE ATT&CK and financial-sector controls.

Skills

Splunk

SPL queries

SOC monitoring

Incident response

Threat hunting

Log analysis

Windows/Linux

EDR

Cloud security

MITRE mapping

Documentation

Communication

Tools

Splunk Enterprise Security

Job description

Stefanini Group is seeking a Cyber Security Analyst with strong Splunk Enterprise / Splunk Enterprise Security experience to monitor, investigate, and respond to cyber threats within a banking/financial services environment. The role emphasizes threat-alert triage, incident investigation, threat hunting, and security monitoring across critical systems.

Responsibilities include monitoring Splunk alerts, investigating suspicious activity, writing SPL queries, and mapping detections to MITRE ATT&CK