ZipRecruiter

Log In

1

Splunk Cybersecurity Defense Analyst Jobs in Delaware

Reco

Security Researcher

Wilmington, DE · On-site +1

We are looking for a Threat Detection Engineer to analyze large-scale SaaS security data ... Stay up-to-date with the latest cybersecurity trends and contribute to the development of cutting ...

System One

Security Engineer II

Milford, DE · On-site

Monitor security alerts using SIEM tools such as Splunk, QRadar, or Sentinel; analyze patterns and ... Bachelor's degree (BA/BS) or equivalent experience in cybersecurity or related field. * 3-5 years ...

System One

Security Engineer II

Milford, DE · On-site

Monitor security alerts using SIEM tools such as Splunk, QRadar, or Sentinel; analyze patterns and ... Bachelor's degree (BA/BS) or equivalent experience in cybersecurity or related field. * 3-5 years ...

System One

Security Engineer II

Milford, DE · On-site

Monitor security alerts using SIEM tools such as Splunk, QRadar, or Sentinel; analyze patterns and ... Bachelor's degree (BA/BS) or equivalent experience in cybersecurity or related field. * 3-5 years ...

System One

Security Engineer II

Milford, DE · On-site

Monitor security alerts using SIEM tools such as Splunk, QRadar, or Sentinel; analyze patterns and ... Bachelor's degree (BA/BS) or equivalent experience in cybersecurity or related field. * 3-5 years ...

System One

Security Engineer II

Milford, DE · On-site

Monitor security alerts using SIEM tools such as Splunk, QRadar, or Sentinel; analyze patterns and ... Bachelor's degree (BA/BS) or equivalent experience in cybersecurity or related field. * 3-5 years ...

System One

Security Engineer II

Milford, DE · On-site

Monitor security alerts using SIEM tools such as Splunk, QRadar, or Sentinel; analyze patterns and ... Bachelor's degree (BA/BS) or equivalent experience in cybersecurity or related field. * 3-5 years ...

System One

Security Engineer II

Milford, DE · On-site

Monitor security alerts using SIEM tools such as Splunk, QRadar, or Sentinel; analyze patterns and ... Bachelor's degree (BA/BS) or equivalent experience in cybersecurity or related field. * 3-5 years ...

System One

Security Engineer II

Milford, DE · On-site

Monitor security alerts using SIEM tools such as Splunk, QRadar, or Sentinel; analyze patterns and ... Bachelor's degree (BA/BS) or equivalent experience in cybersecurity or related field. * 3-5 years ...

Joyson Safety Systems

$122K - $161K/yr

Develop, support and direct static analysis, software unit testing, software system testing ... defensive programming, software layering, multi-processing and synchronization, event-based design

Noblis

Machinery Systems Engineer

Wilmington, DE · On-site

$59K - $92K/yr

... support, cybersecurity, logistics, and life-cycle engineering solutions that help ensure the ... Analyze Fleet technical information, including Fleet messages, engineering advisories, and casualty ...

M&T Bank

Lead Active Directory Engineer

Wilmington, DE · On-site

Strong alignment with Zero Trust and defense-in-depth identity strategies Regulatory & Audit ... Strong ability to analyze and draw reliable conclusions based on large volumes of quantitative data ...

M&T Bank

Lead Active Directory Engineer

Wilmington, DE · Hybrid

Strong alignment with Zero Trust and defense-in-depth identity strategies Regulatory & Audit ... Strong ability to analyze and draw reliable conclusions based on large volumes of quantitative data ...

All JobsSplunk Cybersecurity Defense Analyst JobsSplunk Cybersecurity Defense Analyst Jobs in Delaware

Splunk Cybersecurity Defense Analyst information

What is a Splunk Cybersecurity Defense Analyst?

Splunk Cybersecurity Defense Analysts are professionals who use the Splunk platform to monitor, analyze, and defend an organization’s digital infrastructure against cyber threats. They collect and interpret security data, investigate incidents, and create alerts and dashboards to detect suspicious activity in real-time. Their work helps organizations respond quickly to threats, ensuring the safety and integrity of sensitive information and systems. These analysts often collaborate with IT and security teams to develop best practices for threat detection and response.

How does a Splunk Cybersecurity Defense Analyst typically collaborate with other IT and security teams?

A Splunk Cybersecurity Defense Analyst frequently works alongside network administrators, incident response teams, and other security professionals to detect, investigate, and remediate threats. Collaboration often involves sharing threat intelligence, creating automated alerts, and developing dashboards to provide visibility into security events across the organization. Analysts also participate in regular meetings to coordinate response strategies, review incident post-mortems, and ensure that Splunk configurations align with evolving security requirements. This cross-functional teamwork is essential for maintaining an effective and proactive cybersecurity posture.

What are the key skills and qualifications needed to thrive as a Splunk Cybersecurity Defense Analyst, and why are they important?

To thrive as a Splunk Cybersecurity Defense Analyst, you need a solid understanding of cybersecurity principles, threat analysis, and incident response, typically supported by a degree in information security or related certifications like CompTIA Security+ or GIAC. Proficiency with Splunk Enterprise Security, SIEM platforms, and scripting languages such as Python or PowerShell is essential. Strong analytical thinking, problem-solving abilities, and effective communication are important soft skills for collaborating with teams and responding to security incidents. These skills and qualities are critical for quickly identifying, investigating, and mitigating cyber threats to protect organizational assets.

What is the difference between Splunk Cybersecurity Defense Analyst vs Security Operations Center (SOC) Analyst?

AspectSplunk Cybersecurity Defense AnalystSecurity Operations Center (SOC) Analyst
CertificationsSplunk certifications, CompTIA Security+CompTIA Security+, GIAC certifications
Work EnvironmentPrimarily uses Splunk platform for data analysisMonitors security alerts across various tools in a SOC
Industry UsageFinancial, healthcare, tech sectors leveraging SplunkBroadly in all sectors with security teams
Job FocusAnalyzing security data with Splunk, threat detectionMonitoring, incident response, alert management

While both roles focus on cybersecurity, the Splunk Cybersecurity Defense Analyst specializes in using Splunk for data analysis and threat detection, whereas the SOC Analyst performs broader security monitoring and incident response across multiple tools. The roles often overlap but differ in platform focus and scope of responsibilities.

What are popular job titles related to Splunk Cybersecurity Defense Analyst jobs in Delaware?

For Splunk Cybersecurity Defense Analyst jobs in Delaware, the most frequently searched job titles are:

What job categories do people searching Splunk Cybersecurity Defense Analyst jobs in Delaware look for?

The top searched job categories for Splunk Cybersecurity Defense Analyst jobs in Delaware are:

What cities in Delaware are hiring for Splunk Cybersecurity Defense Analyst jobs?

Cities in Delaware with the most Splunk Cybersecurity Defense Analyst job openings:

Splunk Cybersecurity Defense Analyst jobs near you

Security Researcher

Reco

Wilmington, DE • On-site, Remote

Full-time

Re-posted 25 days ago

Job description

Description
Reco is a fast-growing SaaS security company that helps organizations secure their SaaS and AI environments by detecting identity-based threats and risky configurations.
We are looking for a Threat Detection Engineer to analyze large-scale SaaS security data, investigate incidents, and develop advanced threat detection strategies.
You will work closely with security researchers and customers to identify emerging threats and improve detection capabilities across SaaS environments.
Responsibilities
  • Threat Analysis and Research: Dive deep into terabytes of SaaS Application data to identify new attack vectors, emerging threats, and vulnerabilities across various attack surfaces.
  • Stay up-to-date with the latest cybersecurity trends and contribute to the development of cutting-edge threat detection methodologies.
  • Incident Investigation: Utilize your technical prowess to investigate complex SaaS & AI security incidents, analyzing data from diverse SaaS applications to uncover the root causes and methods of attack.
  • False Positive Reduction: Leverage your expertise in data analysis and correlation to fine-tune detection rules and algorithms, minimizing false positives and enhancing the accuracy of our platform's threat alerts.
  • Thought Leadership and Community Engagement: Drive thought leadership initiatives by creating technical blog posts, delivering webinars, and speaking at conferences to share insights, educate the community, and enhance the company's reputation in the cybersecurity landscape.
  • Be at the forefront of the Reco mission and work closely with Reco customers regarding cyber security investigations and incidents detected in their environments
  • Collaborate with security researchers and data scientists to define new threat detection strategies based on SaaS attack vectors and industry trends.
  • Continuously monitor and analyze SaaS attack techniques, adapting security posture to evolving threats.
  • Work with APIs and integrations to ingest security logs from various SaaS platforms, correlating signals to detect real threats.

Requirements
  • A background of at least 5 years in cybersecurity, preferably in SOC, SIEM, Threat Intelligence, or Cloud Security
  • Experience with SaaS security challenges, such as shadow IT, OAuth risks, IDP misconfigurations, and excessive permissions.
  • Hands-on experience with security data analysis, including large-scale log processing, anomaly detection, and behavioral analytics.
  • Proficiency in SQL (e.g., ClickHouse) for querying security events and correlating threat indicators.
  • Strong understanding of identity-based attacks, insider threats, and SOC detection methodologies.
  • Familiarity with SIEM and XDR solutions (e.g., Splunk, Sentinel, Chronicle) and their role in modern detection engineering.
  • Strong problem-solving and analytical skills to triage security incidents and optimize detection rules.

Advantages:
  • Familiarity with SaaS security best practices, including least-privilege access, OAuth governance, and SSPM.
  • Knowledge of SaaS security frameworks (e.g., SSPM, CASB).
  • Experience with IDP security (Okta, Azure AD, Google IAM) and detecting identity-related SaaS threats.
  • Hands-on experience with Threat Hunting and / or Detection engineering in SaaS environments.
  • Understanding of SaaS API security and experience analyzing integrations with third-party applications.

Apply