Senior Splunk SIEM Engineer — Hybrid

Novalink Solutions LLC; Richmond (VA); Hybrid; USD 120,000 - 160,000; Full time

Job summary

VDOT is seeking a Cybersecurity Engineer 3 to join our hybrid team in Richmond, VA. The role focuses on building advanced defense using Splunk SIEM, threat hunting, and incident response to protect critical infrastructure.

The ideal candidate has 8+ years in cybersecurity, strong SPL skills, and experience with MITRE ATT&CK, NIST/SOC2 standards, and cloud platforms. Certifications such as Splunk Core are highly preferred.

Qualifications

• Minimum of 8+ years of hands-on experience in cybersecurity, specifically operating, building, and investigating threats within a SIEM or Splunk.
• Excellent critical thinking, problem-solving, and communication skills.
• Proficiency in writing SPL (Splunk Processing Language).
• Strong understanding of networking, firewalls, EDR, and cloud platforms (AWS, Azure, or GCP).
• Knowledge of security frameworks (e.g., MITRE ATT&CK) and security compliance standards (e.g., NIST, HIPAA, or SOC 2).
• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Relevant certifications such as Splunk Core Certified User, Splunk Core Certified Advanced Power User, are highly preferred.

Responsibilities

• Threat Detection & Monitoring: Continuously monitor network traffic, endpoint logs, and cloud security events for anomalous behavior and potential security incidents.
• Splunk Management: Create, maintain, and tune Splunk correlation searches, alerts, and dashboards to minimize false positives and improve detection capabilities.
• Incident Response: Investigate potential security incidents, follow forensic evidence, and collaborate with IT and network teams to remediate threats.
• Use Case Development: Develop and refine detection and response playbooks based on threat intelligence and frameworks like MITRE ATT&CK.
• Log Integration: Work with infrastructure teams to onboard new data sources, ensuring log integrity, parsing, and normalization across the SIEM platform.

Skills

8+ years cybersecurity

Troubleshooting

SPL

Networking

Cloud platforms

MITRE ATT&CK

NIST

HIPAA

SOC 2

Communication skills

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology

Tools

Splunk Core Certified User

Splunk Core Certified Advanced Power User

Job description

VDOT is seeking a Cybersecurity Engineer 3 to join our hybrid team in Richmond, VA. The role focuses on building advanced defense using Splunk SIEM, threat hunting, and incident response to protect critical infrastructure.

The ideal candidate has 8+ years in cybersecurity, strong SPL skills, and experience with MITRE ATT&CK, NIST/SOC2 standards, and cloud platforms. Certifications such as Splunk Core are highly preferred.