Splunk SIEM Threat Detective | Cybersecurity Engineer

Rose International; Richmond (VA); On-site; USD 90,000 - 96,000; Full time

Job summary

Rose International (Richmond, VA) is seeking a Cybersecurity Engineer specialized in Splunk SIEM to join our onsite, temporary team for a 10-month assignment.

The role focuses on threat detection, log analysis, and incident response, leveraging Splunk Enterprise Security to monitor and respond to security events. The ideal candidate has 8+ years in security operations and strong communication under pressure.

Qualifications

• Hands-on cybersecurity experience with SIEM/Splunk threat detection.
• Strong problem-solving and communication skills under pressure.
• Proficiency in SPL (Splunk Processing Language): 8+ years.
• Knowledge of networking, firewalls, EDR, and cloud platforms (AWS/Azure/GCP): 8+ years.
• Knowledge of MITRE ATT&CK and NIST/HIPAA/SOC 2 security standards: 8+ years.

Responsibilities

• Threat Detection & Monitoring: monitor network traffic, logs, and cloud events.
• Splunk Management: tune searches, alerts, dashboards to minimize false positives.
• Incident Response: investigate incidents and remediate threats.
• Use Case Development: develop detection/playbooks based on MITRE ATT&CK.
• Log Integration: onboard data sources and normalize logs across the SIEM.
• Compliance & Reporting: assist audit readiness with SIEM evidence and reports.

Skills

Cybersecurity

Firewall

HIPAA

Networking

Education

Bachelor's Degree

Tools

Splunk

Job description

Rose International (Richmond, VA) is seeking a Cybersecurity Engineer specialized in Splunk SIEM to join our onsite, temporary team for a 10-month assignment.

The role focuses on threat detection, log analysis, and incident response, leveraging Splunk Enterprise Security to monitor and respond to security events. The ideal candidate has 8+ years in security operations and strong communication under pressure.