Data Analyst, Splunk

This is a fully remote position, open to applicants in Pennsylvania.

📋 Description

• Utilize Splunk within the DoD Secure Cloud Computing Architecture (SCCA) Virtual Datacenter Management Stack (VDMS) for the log management framework to ingest, normalize, and analyze security event logs, system telemetry, and vulnerability information across cloud-hosted applications.

• Develop sophisticated data models and correlation searches to connect infrastructure-level logs with application-level insights, aiding DoD cloud governance and reporting efforts.

• Provide actionable analytics and compliance reporting that monitors workload health, security posture, and remediation efforts within defense cloud environments.

• Examine vulnerability, security, application, and infrastructure data using Splunk.

• Create and sustain dashboards, reports, scorecards, and metrics that deliver actionable cybersecurity insights.

• Generate advanced Splunk searches, data models, and visualizations to bolster vulnerability management initiatives.

• Detect trends, patterns, and emerging risks within enterprise vulnerability data.

• Formulate methods to correlate vulnerabilities with applications, systems, business services, and mission functions.

• Enhance visibility into vulnerability remediation efforts via customized reporting and analytics.

• Collaborate with cybersecurity, engineering, and operations teams to comprehend reporting needs and devise solutions.

• Design executive-level and operational-level dashboards that convey risk posture and remediation progress.

• Investigate data quality, normalization, and reporting issues to enhance the accuracy and utility of metrics.

• Produce recurring and ad hoc reports that support cybersecurity compliance and operational decision-making.

• Document search logic, reporting methodologies, dashboard designs, and analytical processes.

• Offer recommendations for enhancing vulnerability reporting, data categorization, and application-level visibility.

⛳️ Requirements

• Active Secret Clearance is mandatory.

• IAT II (Security+) or a higher-level certification is required.

• Knowledge of DoD Secure Cloud Computing Architecture (SCCA) and VDMS centralized logging and monitoring practices.

• Experience in analyzing large-scale log datasets and security telemetry from enterprise defense cloud platforms.

• Extensive experience with Splunk in analytics, reporting, cybersecurity, or operations settings.

• Proficient in creating Splunk searches, reports, dashboards, visualizations, and alerts.

• Experience in analyzing cybersecurity and vulnerability management data.

• Understanding of vulnerability management concepts, CVEs, patch management, and remediation workflows.

• Experience handling large datasets and identifying trends, anomalies, and patterns.

• Capability to translate stakeholder requirements into impactful metrics and reporting solutions.

• Strong analytical and problem-solving abilities.

• Excellent written and verbal communication skills.

• Splunk-related certification is highly preferred.

🏝️ Benefits

• Medical, Dental, & Vision.

• Life Insurance, Short-term Disability, Long-term Disability.

• SIMPLE IRA with Company Match.

• Federal Holidays.

• Vacation & Sick Leave.

• $500 Referral Bonus.