Cybersecurity Specialist

Pivotal Consulting•Seattle, WA

3d•Remote

About The Position

We are seeking an experienced Cybersecurity Specialist with strong AWS, Salesforce & Okta expertise to support ongoing security operations for a major global technology client. In this role, you will identify, analyze, and respond to cybersecurity incidents while leveraging AWS, Salesforce and Okta for threat detection, correlation, and response automation. You will collaborate closely with the client’s internal security teams and contribute to the maturity of their SOC capabilities.

Requirements

7+ years of experience working in a Security Operations Center (SOC) or cyber incident response role.
Advanced Splunk experience in both operational monitoring and content development.
Experience with AWS, Okta & Salesforce.
Strong understanding of SIEM and SOAR principles, detection engineering, and log correlation.
Solid knowledge of common security frameworks, including MITRE ATT&CK and NIST.
Familiarity with network protocols, firewalls, IDS/IPS, and endpoint protection tools.
Proven ability to handle high-volume security data and triage incidents efficiently.
MUST reside in Washington, Florida or Texas.
Currently authorized to work in the United States on a full-time basis AND reside in either Washington state or Texas.

Nice To Haves

Industry certifications such as Security+, CEH, GCIA, or GCIH.
Experience in scripting (Python, PowerShell) for SOC automation.
Exposure to cloud security monitoring (AWS, Azure, or GCP).

Responsibilities

Monitor and analyze security events using AWS, Salesforce & Okta to identify potential threats and vulnerabilities.
Investigate and respond to security incidents, providing detailed root cause analysis and remediation support.
Develop and fine-tune Splunk queries, dashboards, alerts, and correlation rules to enhance threat visibility.
Conduct proactive threat hunting and anomaly detection across large data sets.
Document incident findings and create post-incident reports for stakeholders.
Collaborate with infrastructure and application teams to ensure proper log ingestion and data normalization.
Participate in security process improvements and recommend automation or workflow enhancements.