Cyber Analyst Level 3 (40)

Summary

Designing and tuning detection systems, the full-time salaried Cyber Analyst Level 3 will focus on identifying malicious activities using Splunk, while working fully remotely.Key responsibilitiesDevelop and maintain detection content using Splunk Search Processing Language (SPL) to identify threats across various data sourcesBuild and tune correlation searches and risk-based alerting within Splunk Enterprise SecurityCollaborate with cross-functional teams to translate emerging threats into actionable detections and reduce false positives through continuous tuningRequired qualificationsCurrent "L", "Q", or "TS" security clearanceDeep expertise in Splunk SPL, including advanced search commands and performance optimizationHands-on experience with Splunk Enterprise Security and correlation searchesWorking knowledge of the Splunk AI Toolkit for building ML-based detectionsStrong understanding of the MITRE ATT&CK framework and detection engineering methodology

Job Description

Designing and tuning detection systems, the full-time salaried Cyber Analyst Level 3 will focus on identifying malicious activities using Splunk, while working fully remotely.Key responsibilitiesDevelop and maintain detection content using Splunk Search Processing Language (SPL) to identify threats across various data sourcesBuild and tune correlation searches and risk-based alerting within Splunk Enterprise SecurityCollaborate with cross-functional teams to translate emerging threats into actionable detections and reduce false positives through continuous tuningRequired qualificationsCurrent "L", "Q", or "TS" security clearanceDeep expertise in Splunk SPL, including advanced search commands and performance optimizationHands-on experience with Splunk Enterprise Security and correlation searchesWorking knowledge of the Splunk AI Toolkit for building ML-based detectionsStrong understanding of the MITRE ATT&CK framework and detection engineering methodology