Splunk SIEM Engineer: Threat Detection & Incident Response

Accylerate, LLC.; Richmond (VA); On-site; USD 110,000 - 140,000; Full time

Job summary

Accylerate, LLC. seeks a Cybersecurity Engineer to defend our systems by leveraging Splunk Enterprise Security for monitoring, detection, and response. You will develop SPL queries, alerts, and dashboards to improve threat visibility.

The role emphasizes threat hunting, incident response, and working with cloud and network teams to containment and remediation, with a focus on audit-ready reporting.

Qualifications

• Bachelor's degree in CS, cybersecurity, IT, or related field.
• Hands-on experience with SIEM or Splunk operations and investigations.
• Proficiency in SPL (Splunk Processing Language).
• Strong networking, firewall, EDR, and cloud platform knowledge (AWS, Azure, or GCP).
• Knowledge of security frameworks (MITRE ATT&CK) and compliance standards (NIST, HIPAA, SOC).

Responsibilities

• Monitor logs and events using Splunk to detect threats.
• Create, tune SPL searches, alerts, and dashboards.
• Investigate incidents and coordinate remediation with IT and network teams.
• Develop detection and response playbooks using threat intelligence.
• Onboard and normalize new data sources for the SIEM.
• Support audit readiness with evidence and compliance reports.

Skills

Splunk SIEM

SPL

Threat hunting

Log analysis

Incident response

Networking & cloud platforms

Education

Bachelor's degree in Computer Science, Cybersecurity, IT, or related field

Tools

Splunk

SIEM

Job description

Accylerate, LLC. seeks a Cybersecurity Engineer to defend our systems by leveraging Splunk Enterprise Security for monitoring, detection, and response. You will develop SPL queries, alerts, and dashboards to improve threat visibility.

The role emphasizes threat hunting, incident response, and working with cloud and network teams to containment and remediation, with a focus on audit-ready reporting.