Cyber Security Analyst

the Client•Raleigh, NC

10h•Onsite

About The Position

Support Logging and Monitoring MRA remediation to meet management complete timeline. Support is required to review 300 applications for adherence to standards as well as security tool assessments and rationalizations.

Requirements

Proven experience in detection engineering within cybersecurity operations.
Strong proficiency in Splunk (Power User level or higher).
Hands-on experience with security tools such as CrowdStrike, UEBA, and database monitoring solutions.
Familiarity with SIEM and EDR analysis methodologies.
Working knowledge of the MITRE ATT&CK framework.
Excellent communication and organizational skills; ability to guide application owners through technical requirements.
Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.

Nice To Haves

Splunk administration experience.
Relevant certifications such as: CISSP, GIAC, or Splunk Certified Power User.
Experience in financial services or highly regulated environments.

Responsibilities

Perform in-depth analysis of security events and detections from SIEM and EDR platforms.
Review and recommend improvements to security policies and detection strategies.
Assist with log onboarding for critical applications, ensuring proper field capture and normalization.
Utilize Splunk to locate logs, assess data sparsity, and validate normalization.
Collaborate with IT teams and application owners to identify gaps and implement detection enhancements.
Apply MITRE ATT&CK framework to strengthen detection coverage and threat modeling.
Document findings, recommendations, and detection logic clearly and concisely.