Cybersecurity Engineer 3
Yakshna Solutions, Inc. (YSI) is a CMMI Level 3 assessed, ISO 9001, 20000:1, and 27001 certified, woman-owned small business providing professional IT solutions and services to business corporations and government organizations.
About the role
VDOT is seeking a highly analytical and technically proficient Cybersecurity Engineer to develop and implement advanced cyber defense solutions, safeguard infrastructure, and ensure systems are built to specification and deployed successfully. You will play a critical role in defending against cyber threats by leveraging Splunk Enterprise Security to monitor, detect, analyze, and respond to security events.
Responsibilities
- Continuously monitor network traffic, endpoint logs, and cloud security events for anomalous behavior and potential security incidents.
- Create, maintain, and tune Splunk correlation searches, alerts, and dashboards to minimize false positives and improve detection capabilities.
- Investigate potential security incidents, follow forensic evidence, and collaborate with IT and network teams to remediate threats.
- Develop and refine detection and response playbooks based on threat intelligence and frameworks like MITRE ATT&CK.
- Work with infrastructure teams to onboard new data sources, ensuring log integrity, parsing, and normalization across the SIEM platform.
- Support audit readiness by collecting SIEM control evidence and generating compliance reports aligned with internal policies and standards.
Requirements
- Minimum of 8+ years of hands-on experience in cybersecurity, specifically operating, building, and investigating threats within a SIEM or Splunk.
- Proficiency in writing SPL (Splunk Processing Language).
- Strong understanding of networking, firewalls, EDR, and cloud platforms (AWS, Azure, or GCP).
- Knowledge of security frameworks (e.g., MITRE ATT&CK) and security compliance standards (e.g., NIST, HIPAA, or SOC 2).
- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
- Relevant certifications such as Splunk Core Certified User or Splunk Core Certified Advanced Power User are highly preferred.
Skills
- Excellent critical thinking, problem-solving, and communication skills.
- Ability to operate calmly under pressure and manage multiple security tickets.
Benefits
- 401(k)
- Health, dental, and vision insurance
- Life insurance
- Short-term and long-term disability insurance
- Paid time off
- Training and professional development assistance
Pay
$110,000–115,000 annually
Location: 1221 East Broad Street, Richmond, VA 23219 (Onsite). US Citizen or Green Card holder only.