Splunk SIEM Engineer — Threat Detection & Response (Onsite)

BranCore Technologies; Richmond (VA); On-site; USD 110,000 - 165,000; Full time

Job summary

BranCore Technologies is seeking a Cybersecurity Engineer to join our on-site team in Richmond, VA for an 8-month contract. The role focuses on defending our infrastructure using Splunk SIEM, writing SPL queries, and building robust detection and response capabilities.

The ideal candidate has 8+ years in cybersecurity, strong SPL and log-analysis skills, and hands-on experience with cloud platforms and incident response.

Qualifications

• Minimum 8+ years in cybersecurity, specifically operating, building, and investigating threats within a SIEM or Splunk.
• Excellent critical thinking, problem-solving, and communication skills under pressure with multiple security tickets.
• Proficiency in writing SPL (Splunk Processing Language).
• Strong understanding of networking, firewalls, EDR, and cloud platforms (AWS, Azure, or GCP).
• Knowledge of security frameworks (MITRE ATT&CK) and security compliance standards (NIST, HIPAA, SOC 2).
• Bachelor’s degree in relevant field.
• Splunk Core Certified User/Advanced Power User highly preferred (8 years).

Responsibilities

• Threat Detection & Monitoring: Continuously monitor network traffic, endpoint logs, and cloud security events for anomalies and incidents.
• Splunk Management: Create, maintain, and tune correlation searches, alerts, and dashboards to minimize false positives.
• Incident Response: Investigate potential security incidents and coordinate remediation with IT and network teams.
• Use Case Development: Develop and refine detection and response playbooks based on threat intel and MITRE ATT&CK.
• Log Integration: Onboard new data sources, ensure log integrity, parsing, and normalization across the SIEM.
• Compliance & Reporting: Support audit readiness by collecting SIEM evidence and generating compliance reports.

Skills

SPL

Splunk

Threat hunting

Incident response

Log analysis

MITRE ATT&CK

Networking

Cloud security

EDR

Firewalls

Education

Bachelor's degree

Tools

Splunk

Job description

BranCore Technologies is seeking a Cybersecurity Engineer to join our on-site team in Richmond, VA for an 8-month contract. The role focuses on defending our infrastructure using Splunk SIEM, writing SPL queries, and building robust detection and response capabilities.

The ideal candidate has 8+ years in cybersecurity, strong SPL and log-analysis skills, and hands-on experience with cloud platforms and incident response.