Splunk & Threat Alerts Cyber Security Analyst

Stefanini, Inc; Atlanta (GA); Hybrid; USD 143,270,000 - 171,924,000; Full time

Job summary

Stefanini, Inc. in Atlanta, GA, is seeking a Cyber Security Analyst with strong Splunk experience to monitor, investigate, and respond to cyber threats in a banking environment.

The role emphasizes threat-alert triage, incident investigation, threat hunting, and security monitoring across critical financial systems. The candidate should bring 5+ years in cybersecurity operations, hands-on Splunk ES and SPL development, and familiarity with Windows/Linux, IAM, EDR, cloud security, and

Qualifications

• 5+ years of experience in cybersecurity operations, SOC monitoring, or incident response.
• Hands-on Splunk and SPL query development experience.
• Experience in banking, financial services, payments, fintech, or regulated environments.
• Knowledge of financial-sector risks, including fraud and data protection.
• Familiarity with Windows/Linux, network security, IAM, EDR, cloud security, and incident-response processes.

Responsibilities

• Monitor and triage Splunk notable events, correlation searches, dashboards, and risk-based alerts.
• Investigate suspicious authentication, privileged-account activity, malware, phishing, ransomware, data exfiltration, and unauthorized transactions or system access.
• Write and optimize SPL queries for alert investigation, event correlation, and threat hunting.
• Analyze logs from SIEM, EDR, firewalls, VPN, identity platforms, cloud services, applications, and banking systems.
• Validate true and false positives, prioritize alerts by risk, and elevate confirmed incidents according to SOC procedures.
• Develop and tune Splunk correlation searches, dashboards, reports, and detection rules to reduce false positives and improve coverage.
• Support incident response, root-cause analysis, evidence preservation, and post-incident reporting.
• Map threats and detections to MITRE ATT&CK and relevant financial-sector security controls.

Skills

Cybersecurity operations

Incident response

Threat detection

Threat hunting

Analytical thinking

Tools

Splunk Enterprise Security

Splunk SPL

Job description

Stefanini, Inc. in Atlanta, GA, is seeking a Cyber Security Analyst with strong Splunk experience to monitor, investigate, and respond to cyber threats in a banking environment.

The role emphasizes threat-alert triage, incident investigation, threat hunting, and security monitoring across critical financial systems. The candidate should bring 5+ years in cybersecurity operations, hands-on Splunk ES and SPL development, and familiarity with Windows/Linux, IAM, EDR, cloud security, and