Cybersecurity Engineer

Job Title: Cybersecurity Engineer
Richmond,VA
Onsite

Key Responsibilities:

• Threat Detection & Monitoring: Continuously monitor network traffic, endpoint logs, and cloud security events for anomalous behavior and potential security incidents.

• Splunk Management: Create, maintain, and tune Splunk correlation searches, alerts, and dashboards to minimize false positives and improve overall detection capabilities.

• Incident Response: Investigate potential security incidents, analyze forensic evidence, and collaborate with IT and network teams to rapidly remediate threats.

• Use Case Development: Develop and refine detection and response playbooks based on threat intelligence and established industry frameworks (e.g., MITRE ATT&CK).

• Log Integration: Work closely with infrastructure teams to onboard new data sources, ensuring log integrity, parsing, and normalization across the SIEM platform.

• Compliance & Reporting: Support audit readiness by collecting SIEM control evidence and generating comprehensive compliance reports aligned with internal policies and regulatory standards.