{"id":2139814,"url":"https://alion.io/job/tomorrow-hire-cybersecurity-engineer-3","title":"Cybersecurity Engineer 3","company":{"id":4895,"name":"Tomorrow Hire","domain":"tomorrowhire.com","url":"https://alion.io/company/tomorrowhire","size_band":null,"is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Richmond, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":null,"max":104,"currency":"USD","period":"hour","gross":null,"usd_annual":208000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"HIPAA","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-09-22T00:00:00Z","employer_posted_date":"2026-09-22","last_verified_at":"2026-10-14T11:17:48Z","board_verified":true,"closed_at":null,"days_open":22,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":22},"description":"Job Title: Cybersecurity Engineer 3\nWork Type: Onsite\nLocation: Richmond, VA 23219\nSalary/Rate: Up to $104.77/hr\nStart Date: 09/28/2026\nEnd Date: 06/30/2027\nIndustry Category: Information Technology / Cybersecurity\nEmployment Type: Contract\nRequisition ID: 811203\nOverview:\nThe Virginia Department of Transportation (VDOT) is seeking a highly analytical and technically proficient Cybersecurity Engineer 3 to support cybersecurity operations and Splunk SIEM capabilities.\nThe position will develop and implement advanced cyber defense solutions, protect agency infrastructure, monitor and analyze security events, investigate threats, and support secure system deployment.\nApplication:\nCandidates should have extensive hands-on experience with cybersecurity operations, Splunk SIEM, SPL, threat detection, log analysis, incident investigation, and threat hunting.\nStrong knowledge of networking, firewalls, EDR, cloud platforms, security frameworks, and compliance standards is also required.\nJob Description:\nThe Cybersecurity Engineer will leverage Splunk Enterprise Security to monitor, detect, analyze, and respond to security events. The role will focus on improving detection capabilities, investigating potential security incidents, developing security use cases, maintaining SIEM data sources, and supporting cybersecurity compliance requirements.\nResponsibilities:\nMonitor network traffic, endpoint logs, and cloud security events for anomalous activity and potential security incidents.\nUse Splunk Enterprise Security to monitor, detect, analyze, and respond to security events.\nCreate, maintain, and tune Splunk correlation searches, alerts, and dashboards.\nDevelop and optimize SPL queries for security monitoring, threat detection, and investigation.\nInvestigate potential security incidents and analyze forensic evidence.\nConduct threat hunting to identify malicious activity and indicators of compromise.\nCollaborate with IT, network, infrastructure, and security teams to contain and remediate threats.\nDevelop and refine security detection and response use cases.\nCreate detection and response playbooks using threat intelligence and security frameworks such as MITRE ATT&CK.\nWork with infrastructure teams to onboard new log and security data sources.\nEnsure log integrity, parsing, and normalization across the SIEM platform.\nSupport SIEM data integrations and troubleshooting.\nCollect SIEM control evidence for security audits.\nGenerate compliance and security reports aligned with organizational policies and standards.\nManage multiple security tickets and investigations while maintaining effective communication with stakeholders.\nRequirements\nMinimum Qualifications:\n8+ years of hands-on cybersecurity experience, specifically operating, building, and investigating threats within a SIEM or Splunk environment.\n8+ years of experience writing SPL (Splunk Processing Language).\n8+ years of experience demonstrating critical thinking, problem-solving, and communication skills.\nAbility to operate calmly under pressure and manage multiple security tickets.\n8+ years of experience with networking and firewalls.\n8+ years of experience with EDR technologies.\n8+ years of experience with cloud platforms, including AWS, Azure, and/or GCP.\n8+ years of experience with security frameworks such as MITRE ATT&CK.\n8+ years of experience with security compliance standards such as NIST, HIPAA, and/or SOC 2.\nStrong experience with log analysis, threat hunting, security monitoring, and incident investigation.\nStrong understanding of SIEM technologies and security event management.\nBachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field.\nPreferred Qualifications:\nSplunk Core Certified User certification.\nSplunk Core Certified Advanced Power User certification.\nAdditional Splunk or cybersecurity certifications.\nExperience developing Splunk Enterprise Security dashboards, correlation searches, and alerts.\nExperience developing security detection and response playbooks.\nExperience applying threat intelligence and MITRE ATT&CK-based detection strategies.\nBenefits\nCompensation:\nPay Rate: $104.77/hr\nSchedule:\nOnsite\nWork Location:\nRichmond, VA 23219","description_format":"text","description_chars":4208,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-09T02:55:41Z"}],"visa":[],"liveness":{"score":29,"band":"fade","label":"Fading","p_open":1,"p_active":0.382,"p_room":0.75,"age_days":22,"expected_fill_days":23,"reasons":["conf:4","agency","win:late"],"computed_at":"2026-10-14T06:34:16Z"},"pay":{"stated_usd_annual":208000,"is_top_pay":true},"html_url":"https://alion.io/job/tomorrow-hire-cybersecurity-engineer-3","json_url":"https://alion.io/job/tomorrow-hire-cybersecurity-engineer-3.json","meta":{"generated_at":"2026-10-14T12:33:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15344,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4895},"rest":"https://alion.io/mcp/rest/get_company?id=4895"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftomorrow-hire-cybersecurity-engineer-3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftomorrow-hire-cybersecurity-engineer-3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftomorrow-hire-cybersecurity-engineer-3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tomorrow-hire-cybersecurity-engineer-3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftomorrow-hire-cybersecurity-engineer-3"}]}