Senior Splunk SIEM Engineer - Threat Detection & IR (Onsite)

Tri-Force Consulting Services, Inc.; Richmond (VA); On-site; USD 110,000 - 170,000; Full time

Job summary

Tri-Force Consulting Services seeks a Cybersecurity Engineer to support the Virginia Information Technology Agency in Richmond, VA. This onsite role develops and implements advanced cyber defense solutions to safeguard the agency’s infrastructure and ensure deployment to specification.

The candidate will monitor and analyze security events using Splunk SIEM, develop detection use cases, and coordinate incident response with IT teams to ensure compliance and timely remediation.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, IT, or related field.
• Minimum 8+ years of hands-on cybersecurity experience in SIEM/Splunk.
• Proficiency in SPL and threat hunting.

Responsibilities

• Monitor network traffic, endpoint logs, and cloud events for incidents.
• Create and tune Splunk correlation searches, alerts, dashboards.
• Investigate security incidents and coordinate remediation with IT and network teams.

Skills

Splunk SPL

Threat hunting

Incident response

Log analysis

Communication skills

Critical thinking

Splunk Core Certified User

Splunk Core Certified Advanced Power U

Education

Bachelor's degree in Computer Science, Cybersecurity, IT, or related field

Tools

Splunk

AWS

Azure

GCP

Job description

Tri-Force Consulting Services seeks a Cybersecurity Engineer to support the Virginia Information Technology Agency in Richmond, VA. This onsite role develops and implements advanced cyber defense solutions to safeguard the agency’s infrastructure and ensure deployment to specification.

The candidate will monitor and analyze security events using Splunk SIEM, develop detection use cases, and coordinate incident response with IT teams to ensure compliance and timely remediation.