Lead Splunk Analytics Engineer, Cyber & IT Operations

KDA Consulting; Herndon (VA); Presencial; USD 140.000 - 180.000; Jornada completa

Descripción de la vacante

KDA Consulting is seeking a hands-on Cyber & IT Operations Data / Splunk Analytics Engineer to support the Sponsor’s IT systems data modernization. You will design data quality baselines, standardize schemas (e.g., CIM), and build robust ingestion pipelines for high-velocity telemetry to enable threat analysis and IT health monitoring.

In this role, you will architect Splunk deployments, optimize SPL searches, and collaborate with cloud and platform engineers to deliver observable,

Formación

• Bachelor's degree in CS/IT/Cyber or equivalent experience.
• Hands-on experience with Splunk CIM and data normalization.
• Proven ability to architect data ingestion pipelines and telemetry standards.
• Active TS/SCI with Polygraph is required.

Responsabilidades

• Standardize, cleanse, and normalize high-velocity machine data into common schemas.
• Configure and optimize distributed Splunk infrastructure and data ingestion.
• Develop SPL queries, accelerated data models, and real-time alerts.
• Design data routing, parsing, and transformation pipelines using Splunk or NiFi.
• Build dashboards and reports translating security events to insights.
• Collaborate with platform and cloud engineers to integrate datasets.

Conocimientos

Data quality

Telemetry standards

Security analytics

Splunk optimization

Scripting & automation

Cloud security

Educación

Bachelor's degree

Herramientas

Splunk

Apache NiFi

Kafka

Python

Bash

JSON/REST APIs

Descripción del empleo

KDA Consulting is seeking a hands-on Cyber & IT Operations Data / Splunk Analytics Engineer to support the Sponsor’s IT systems data modernization. You will design data quality baselines, standardize schemas (e.g., CIM), and build robust ingestion pipelines for high-velocity telemetry to enable threat analysis and IT health monitoring.

In this role, you will architect Splunk deployments, optimize SPL searches, and collaborate with cloud and platform engineers to deliver observable,