Senior Splunk SIEM Engineer — Incident Detection & Response

Cybersecurity Jobs; Richmond (VA); On-site; USD 130,000 - 170,000; Full time

Job summary

Skywalk Global is seeking a Cybersecurity Engineer in Richmond, VA onsite to strengthen the organization’s cyber defense program through advanced monitoring, detection, and incident support. This onsite role focuses on Splunk Enterprise Security usage to monitor, detect, analyze, and respond to security events.

You will work with IT and network teams to ensure data sources are onboarded, dashboards and alerts tuned, and security controls audited for compliance with internal policies and

Qualifications

• 8+ years of hands-on cybersecurity experience focusing on operating, building, and investigating threats within a SIEM environment, specifically Splunk.
• Strong critical thinking, problem-solving, and communication skills under pressure.
• Proficiency in SPL (Splunk Processing Language).
• Working knowledge of networking, firewalls, EDR, and cloud platforms (AWS/Azure/GCP).
• Familiarity with MITRE ATT&CK and compliance standards like NIST/HIPAA/SOC 2.

Responsibilities

• Continuously monitor network traffic, endpoint logs, and cloud security events to identify anomalies and incidents.
• Create, maintain, and tune Splunk correlation searches, alerts, and dashboards to reduce false positives and improve detection quality.
• Investigate potential security incidents, preserve forensic evidence, and coordinate with IT and network teams to remediate threats.
• Develop and refine detection and response playbooks using threat intelligence and MITRE ATT&CK framework.
• Onboard new data sources with infrastructure teams ensuring log integrity and normalization for the SIEM platform.
• Support audit readiness by collecting SIEM control evidence and producing compliance reports.

Skills

Splunk SIEM

Splunk Enterprise Security

SPL (Splunk Processing Language)

MITRE ATT&CK

Threat analysis

Networking

Cloud platforms

Education

Bachelor’s degree in Computer Science, Cybersecurity, IT, or related field

Tools

AWS

Azure

GCP

EDR

Job description

Skywalk Global is seeking a Cybersecurity Engineer in Richmond, VA onsite to strengthen the organization’s cyber defense program through advanced monitoring, detection, and incident support. This onsite role focuses on Splunk Enterprise Security usage to monitor, detect, analyze, and respond to security events.

You will work with IT and network teams to ensure data sources are onboarded, dashboards and alerts tuned, and security controls audited for compliance with internal policies and