Cybersecurity Engineer 3 | Contract |Onsite- Richmond, VA

INFO ORIGIN INC • Richmond, VA

7h • $70 - $90 • Onsite

About The Position

The Cybersecurity Engineer will be responsible for continuously monitoring network traffic, endpoint logs, and cloud security events for anomalous behavior and potential security incidents. This role involves managing Splunk, developing detection and response playbooks, integrating logs, and supporting compliance and reporting efforts.

Requirements

• Experience in threat detection and monitoring.
• Proficiency in Splunk management, including correlation searches, alerts, and dashboards.
• Experience with incident response and forensic evidence handling.
• Ability to develop detection and response playbooks.
• Experience with log integration and SIEM platforms.
• Familiarity with compliance and reporting requirements.

Responsibilities

• Continuously monitor network traffic, endpoint logs, and cloud security events for anomalous behavior and potential security incidents.
• Create, maintain, and tune Splunk correlation searches, alerts, and dashboards to minimize false positives and improve detection capabilities.
• Investigate potential security incidents, follow forensic evidence, and collaborate with IT and network teams to remediate threats.
• Develop and refine detection and response playbooks based on threat intelligence and frameworks like MITRE ATT&CK.
• Work with infrastructure teams to onboard new data sources, ensuring log integrity, parsing, and normalization across the SIEM platform.
• Support audit readiness by collecting SIEM control evidence and generating compliance reports aligned with internal policies and standards.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed