Role Name : IT Security Specialist Threat & Intrusion Detection Location: Denver, CO / Addison, TX / Charlotte, NC
Interview: In-Person Interview Required Local Candidates Only
Rate: $80/hr on W2
Employment Type: W2
Visa: Open to all W2 candidates; H1B Transfer is also fine
Job Description:
We are seeking an experienced IT Security Specialist with strong expertise in threat detection, intrusion detection, security monitoring, and incident response. The ideal candidate will have extensive experience analyzing security and web application logs, developing threat-hunting queries in Splunk, and managing security incidents from detection through remediation.
Responsibilities:
Perform threat and intrusion detection activities to identify potential security threats, vulnerabilities, and malicious activity.
Analyze and interpret web application and security logs from a security perspective.
Develop, optimize, and maintain complex Splunk SPL queries for threat hunting, monitoring, and security analytics.
Monitor security events and investigate suspicious activities across enterprise environments.
Manage the full incident response lifecycle, including detection, investigation, containment, eradication, recovery, and post-incident analysis.
Conduct root cause analysis and identify remediation actions to reduce business and security risks.
Analyze Apache web logs, IIS logs, Active Directory logs, and other security-related log sources.
Work across Linux, Windows, and MacOS environments to investigate and troubleshoot security events.
Collaborate with security, infrastructure, application, and other technical teams during incident investigations.
Identify trends and indicators of compromise and recommend appropriate security improvements.
Required Qualifications:
10+ years of experience in intrusion detection, threat detection, and security log analysis.
5+ years of hands-on experience with Splunk.
Strong experience developing, optimizing, and maintaining complex SPL queries.
5+ years of Incident Response experience with full incident lifecycle management.
Strong experience conducting security investigations and root cause analysis.
Working knowledge of Linux, Windows, and MacOS operating systems.
Experience interpreting Apache web logs, IIS logs, Active Directory logs, and other security logs.
Strong understanding of threat hunting, security monitoring, and security analytics.
Excellent analytical, troubleshooting, and communication skills.
