Splunk Data Analyst

Enterprise-Horizon-Consulting-Group; Mechanicsburg (Cumberland County); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical, Dental, & Vision

Life Insurance

SIMPLE IRA with Company Match

Federal Holidays

Vacation & Sick Leave

Job summary

Enterprise Horizon Consulting Group is seeking a cybersecurity data analyst to leverage Splunk within the DoD Secure Cloud Computing Architecture (SCCA) VDMS for ingestion, normalization, and analysis of security logs across cloud-hosted applications.

The role involves building data models, dashboards, and reports to support governance, risk, and remediation efforts within defense cloud environments, with strong emphasis on vulnerability management and executive-level visibility.

Qualifications

• Active Secret Clearance required.
• IAT II (Security+) or higher-level certification required.
• Familiarity with DoD Secure Cloud Computing Architecture (SCCA) and VDMS centralized logging and monitoring practices.
• Experience analyzing large-scale log datasets and security telemetry originating from enterprise defense cloud platforms.
• Strong experience working with Splunk in an analytics, reporting, cybersecurity, or operations environment.
• Strong experience creating Splunk searches, reports, dashboards, visualizations, and alerts.
• Experience analyzing cybersecurity and vulnerability management data.
• Understanding of vulnerability management concepts, CVEs, patch management, and remediation workflows.
• Experience working with large datasets and identifying trends, anomalies, and patterns.
• Ability to translate stakeholder requirements into meaningful metrics and reporting solutions.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Splunk-related certification highly desired.

Responsibilities

• Leverage Splunk within the DoD Secure Cloud Computing Architecture (SCCA) VDMS log management infrastructure to ingest, normalize, and analyze security event logs, system telemetry, and vulnerability data across cloud-hosted applications.
• Build advanced data models and correlation searches to bridge infrastructure-level logs with application-level visibility, supporting DoD cloud governance and reporting initiatives.
• Deliver actionable analytics and compliance reporting that tracks workload health, security posture, and remediation progress within defense cloud environments.
• Analyze vulnerability, security, application, and infrastructure data within Splunk.
• Develop and maintain dashboards, reports, scorecards, and metrics that provide actionable cybersecurity insights.
• Create advanced Splunk searches, data models, and visualizations to support vulnerability management efforts.
• Identify trends, patterns, and emerging risks across enterprise vulnerability data.
• Develop methods to correlate vulnerabilities to applications, systems, business services, and mission functions.
• Improve visibility into vulnerability remediation efforts through tailored reporting and analytics.
• Work with cybersecurity, engineering, and operations teams to understand reporting requirements and develop solutions.
• Create executive-level and operational-level dashboards that communicate risk posture and remediation progress.
• Investigate data quality, data normalization, and reporting challenges to improve the accuracy and usefulness of metrics.
• Develop recurring and ad hoc reports supporting cybersecurity compliance and operational decision-making.
• Document search logic, reporting methodologies, dashboard designs, and analytic processes.
• Provide recommendations for improving vulnerability reporting, data categorization, and application-level visibility.

Job description

Key Responsibilities

• Leverage Splunk within the DoD Secure Cloud Computing Architecture (SCCA) Virtual Datacenter Management Stack (VDMS) log management infrastructure to ingest, normalize, and analyze security event logs, system telemetry, and vulnerability data across cloud-hosted applications.
• Build advanced data models and correlation searches to bridge infrastructure-level logs with application-level visibility, supporting DoD cloud governance and reporting initiatives.
• Deliver actionable analytics and compliance reporting that tracks workload health, security posture, and remediation progress within defense cloud environments.
• Analyze vulnerability, security, application, and infrastructure data within Splunk.
• Develop and maintain dashboards, reports, scorecards, and metrics that provide actionable cybersecurity insights.
• Create advanced Splunk searches, data models, and visualizations to support vulnerability management efforts.
• Identify trends, patterns, and emerging risks across enterprise vulnerability data.
• Develop methods to correlate vulnerabilities to applications, systems, business services, and mission functions.
• Improve visibility into vulnerability remediation efforts through tailored reporting and analytics.
• Work with cybersecurity, engineering, and operations teams to understand reporting requirements and develop solutions.
• Create executive-level and operational-level dashboards that communicate risk posture and remediation progress.
• Investigate data quality, data normalization, and reporting challenges to improve the accuracy and usefulness of metrics.
• Develop recurring and ad hoc reports supporting cybersecurity compliance and operational decision-making.
• Document search logic, reporting methodologies, dashboard designs, and analytic processes.
• Provide recommendations for improving vulnerability reporting, data categorization, and application-level visibility.

• Active Secret Clearance required.
• IAT II (Security+) or higher-level certification required.
• Familiarity with DoD Secure Cloud Computing Architecture (SCCA) and VDMS centralized logging and monitoring practices.
• Experience analyzing large-scale log datasets and security telemetry originating from enterprise defense cloud platforms.
• Strong experience working with Splunk in an analytics, reporting, cybersecurity, or operations environment.
• Strong experience creating Splunk searches, reports, dashboards, visualizations, and alerts.
• Experience analyzing cybersecurity and vulnerability management data.
• Understanding of vulnerability management concepts, CVEs, patch management, and remediation workflows.
• Experience working with large datasets and identifying trends, anomalies, and patterns.
• Ability to translate stakeholder requirements into meaningful metrics and reporting solutions.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Splunk-related certification highly desired.

Benefits

We offer full-time salaried employees competitive salaries with a range of benefits, including:

• Medical, Dental, & Vision
• Life Insurance, Short-term Disability, Long-term Disability
• SIMPLE IRA with Company Match
• Federal Holidays
• Vacation & Sick Leave

Enterprise Horizon Consulting Group is an equal opportunity employer. Enterprise Horizon Consulting Group does not discriminate against any employee or applicant for employment on the basis of race, color, religion, sex, marital status, sexual orientation, gender identity, national origin, ancestry, age (40 and over), physical or mental disability, or protected veteran status, or any other protected status in accordance with all applicable federal, state and local laws.