Senior Splunk & SIEM Analyst – DISA Environment (Hybrid)

Spatial Front, Inc; Crystal City (TX); Hybrid; USD 100,000 - 150,000; Full time

Job summary

Spatial Front, Inc. in Crystal City, VA (On-Site/Hybrid) seeks a Splunk Administrator / SIEM Analyst to support enterprise security monitoring, log onboarding, analytics, and incident response.

You will administer Splunk and related analytics platforms, configure ingestion pipelines, and develop dashboards and alerts to improve detection and response. Ideal candidates have 5+ years in log management and SIEM, and hands-on Splunk experience in enterprise settings.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent operational experience).
• 5+ years of dedicated engineering experience focused on log management and SIEM platforms.
• Active CompTIA Security+ (IAT Level II compliant).
• Experience administering Splunk in an enterprise environment.
• Experience with SIEM operations, monitoring, and analytics.
• Working knowledge of incident response processes and security event investigation.
• Ability to support log ingestion, parsing, normalization, and platform/server onboarding.
• Experience scripting or automating tasks within SIEM or analytics platforms.
• Hands-on experience with one or more of the following: Splunk, Elastic, other SIEM/analytics platforms.
• Ability to work Day or Swing shift: 0800-1600 or 1600-0000.
• Experience operating in a DISA-domain or similarly controlled enterprise environment.
• Strong troubleshooting, analytical, and documentation skills.

Responsibilities

• Administer, operate, and maintain Splunk and other SIEM/analytics platforms.
• Configure, monitor, and troubleshoot log ingestion pipelines from servers, applications, and enterprise platforms.
• Ensure reliable onboarding, normalization, and availability of security and operational logs.
• Develop and maintain searches, dashboards, alerts, reports, and analytics use cases.
• Support incident response (IR) activities through log analysis, event correlation, and investigative data support.
• Assist with tuning SIEM content to improve detection fidelity and reduce false positives.
• Support analytics and logging requirements associated with OCI readiness/preparation.
• Work within a DISA-domain environment and coordinate with stakeholders across security, infrastructure, and application teams.
• Support monitoring and analysis for technologies including WAF, identity/access management, OHS/OAM, and WebLogic.
• Create scripts and automation to improve SIEM administration, data onboarding, correlation, and reporting.
• Validate that server, application, and platform data sources are properly integrated into SIEM tools.
• Document configurations, data flows, standard procedures, and operational issues.

Skills

Splunk administration

SIEM analytics

Incident response

Log ingestion

Scripting/Automation

Elastic

WAF

OHS/OAM

WebLogic

DISA-domain experience

Education

Bachelor's degree

Tools

Splunk

Elastic

Other SIEM platforms

Job description

Spatial Front, Inc. in Crystal City, VA (On-Site/Hybrid) seeks a Splunk Administrator / SIEM Analyst to support enterprise security monitoring, log onboarding, analytics, and incident response.

You will administer Splunk and related analytics platforms, configure ingestion pipelines, and develop dashboards and alerts to improve detection and response. Ideal candidates have 5+ years in log management and SIEM, and hands-on Splunk experience in enterprise settings.