Threat Detection Engineer: Splunk & ATT&CK Expert

Regions Bank; Atlanta (GA); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Paid Vacation/Sick Time

401K with Company Match

Medical, Dental and Vision Benefits

Disability Benefits

Health Savings Account

Flexible Spending Account

Life Insurance

Parental Leave

Employee Assistance Program

Associate Volunteer Program

Job summary

Regions Bank in Hoover, Alabama is seeking a Cyber Security Engineer to support cloud applications, infrastructure and platform security within the Cyber Security organization. You will design, implement, and operate security solutions and provide day-to-day administration and incident response support.

The ideal candidate has deep Splunk Enterprise and Splunk ES experience, strong Python and PowerShell skills, familiarity with MITRE ATT&CK, and a track record of improving detection, governance,

Qualifications

• Bachelor's degree in Information Technology, Information Security, Information Systems Management, Computer Science, Engineering or related field.
• Certifications such as CISSP, Security+ or CCNA are a plus.
• Experience with security monitoring, incident response, and governance practices.

Responsibilities

• Designs, implements, and supports cyber security technology solutions.
• Provides technical administration including troubleshooting, patching, and day-to-day support.
• Stays abreast of industry trends and aligns security with business needs.
• Maintains operational documentation and reports for monthly trend analysis.
• Researches, PoCs, and evaluates new security technologies and approaches.
• Participates in on-call rotation for relevant cyber security technologies.
• Collaborates with threat hunters, SOC analysts and vendors to improve detections.

Skills

Splunk Enterprise

Splunk ES

Threat hunting

Incident response

Python

PowerShell

Regex

Git-based Detection

Analytical thinking

Collaboration with SOC

Education

Bachelor's degree in Information Technology / Information Security / Computer Science or related field

Tools

Microsoft Defender

CrowdStrike

Palo Alto

Okta

Windows Events / Sysmon

AWS / Azure cloud logging

Job description

Regions Bank in Hoover, Alabama is seeking a Cyber Security Engineer to support cloud applications, infrastructure and platform security within the Cyber Security organization. You will design, implement, and operate security solutions and provide day-to-day administration and incident response support.

The ideal candidate has deep Splunk Enterprise and Splunk ES experience, strong Python and PowerShell skills, familiarity with MITRE ATT&CK, and a track record of improving detection, governance,