Splunk SIEM Threat Detection & Incident Response Engineer

TALENT Software Services; Richmond (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

TALENT Software Services is seeking a Cybersecurity Engineer to support Splunk SIEM, monitor logs, and detect threats. You will build and tune detection content, analyze security events, and coordinate incident response with IT teams.

The role emphasizes log analysis, threat hunting, and writing Splunk queries to identify malicious activity, ensuring log integrity and timely remediation. Richmond, VA offers a vibrant tech scene and quality of life.

Qualifications

• Experience analyzing security logs across network, endpoint, and cloud environments.
• Strong understanding of threat hunting workflows and incident lifecycle.
• Proficiency in writing Splunk SPL queries to detect threats and anomalies.

Responsibilities

• Monitor network and system logs for unusual activity.
• Develop and tune Splunk correlation searches, alerts, and dashboards.
• Investigate incidents and coordinate remediation with IT and security teams.
• Create detection content and playbooks using threat intel and MITRE frameworks.
• Assist with log onboarding, parsing, and data normalization across the SIEM.

Skills

Log analysis

Threat hunting

Splunk queries

Analytical thinking

Tools

Splunk Enterprise Security

Job description

TALENT Software Services is seeking a Cybersecurity Engineer to support Splunk SIEM, monitor logs, and detect threats. You will build and tune detection content, analyze security events, and coordinate incident response with IT teams.

The role emphasizes log analysis, threat hunting, and writing Splunk queries to identify malicious activity, ensuring log integrity and timely remediation. Richmond, VA offers a vibrant tech scene and quality of life.