Cybersecurity Analyst

Responsibilities

• Oversee daily security event monitoring and assess alerts to identify potential threats, suspicious activity, and active incidents.
• Use Splunk to analyze logs, correlate events, and create meaningful detections that improve visibility across the environment.
• Design, refine, and maintain dashboards, searches, and alert logic to increase detection accuracy and reduce unnecessary noise.
• Apply the MITRE ATT&CK framework to strengthen threat analysis and develop detection content aligned to adversary behaviors.
• Support incident response efforts by assisting with investigation, containment, remediation, recovery, and lessons-learned activities.
• Document operational procedures, response playbooks, and technical workflows to promote consistency and readiness within security operations.
• Develop reporting, metrics, and trend analysis to communicate risks, operational performance, and emerging concerns to stakeholders.
• Leverage Python, PowerShell, and automation techniques to streamline repetitive tasks and improve security operations efficiency.
• Review large volumes of security data to uncover patterns, emerging threats, and opportunities for more proactive defense.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field with at least 3 years of cybersecurity experience, or an associate degree/equivalent technical training with 5 or more years of relevant experience.
• Demonstrated hands-on experience with Splunk, including query creation, search development, and security-focused analysis.
• Background in security operations, cyber monitoring, or incident response within an enterprise environment.
• Working knowledge of the MITRE ATT&CK framework and its use in threat detection and investigative analysis.
• Experience writing scripts in Python, PowerShell, or similar languages to support automation and operational improvements.
• Ability to investigate threats across endpoints, networks, cloud environments, web activity, and forensic data sources.
• Familiarity with security frameworks and regulated environments, including standards such as NIST 800-53.
• Strong analytical, communication, and collaboration skills, with the ability to manage multiple priorities effectively.

Qualifications

• Hands-on experience with Splunk, including query creation, search development, and security-focused analysis.
• Working knowledge of the MITRE ATT&CK framework and its use in threat detection and investigative analysis.
• Experience writing scripts in Python, PowerShell, or similar languages to support automation and operational improvements.
• Ability to investigate threats across endpoints, networks, cloud environments, web activity, and forensic data sources.
• Familiarity with security frameworks and regulated environments, including standards such as NIST 800-53.

Skills

• Python
• PowerShell
• Automation techniques
• Threat analysis
• MITRE ATT&CK framework

Benefits

• Medical
• Vision
• Dental
• Life and disability insurance

Pay

• Competitive compensation

Schedule

• Flexible work arrangements may be available

Company

Robert Half is the world’s first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles.