Splunk Data Analyst

Enterprise Horizon Consulting Group; Mechanicsburg (Cumberland County); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical Benefits

Dental & Vision

Life Insurance

Disability Insurance

SIMPLE IRA

Federal Holidays

Vacation & Sick Leave

Job summary

Enterprise Horizon Consulting Group seeks a skilled Splunk analyst to join a DoD cloud security program. You will ingest, normalize, and analyze security logs and telemetry from defense cloud platforms, building data models to connect infrastructure data with application visibility.

You will develop dashboards, reports, and alerts to track vulnerability management, remediation progress, and risk posture, collaborating with cybersecurity, engineering, and operations teams.

Qualifications

• Active Secret Clearance required.
• IAT II (Security+) or higher-level certification required.
• Familiarity with DoD Secure Cloud Computing Architecture (SCCA) and VDMS centralized logging and monitoring practices.
• Experience analyzing large-scale log datasets and security telemetry originating from enterprise defense cloud platforms.
• Strong experience creating Splunk searches, reports, dashboards, visualizations, and alerts.
• Understanding of vulnerability management concepts, CVEs, patch management, and remediation workflows.

Responsibilities

• Leverage Splunk within the DoD SCCA VDMS log management stack to ingest, normalize, and analyze security event logs and telemetry across cloud-hosted applications.
• Build advanced data models and correlation searches to bridge infrastructure logs with application visibility.
• Deliver analytics and compliance reporting tracking workload health, security posture, and remediation progress within defense cloud environments.
• Analyze vulnerability, security, application, and infrastructure data within Splunk.
• Develop and maintain dashboards, reports, scorecards, and metrics for actionable cybersecurity insights.
• Create advanced Splunk searches, data models, and visualizations to support vulnerability management.
• Identify trends, patterns, and emerging risks across enterprise vulnerability data.
• Correlate vulnerabilities to applications, systems, and mission functions.
• Improve visibility into remediation efforts through tailored reporting.
• Collaborate with cybersecurity, engineering, and operations teams to meet reporting requirements.
• Create executive and operational dashboards communicating risk posture and remediation progress.
• Investigate data quality and reporting challenges to improve metrics accuracy.
• Develop recurring and ad hoc reports supporting cybersecurity compliance.
• Document search logic, reporting methodologies, and dashboard designs.
• Provide recommendations for improving vulnerability reporting and data categorization.

Skills

Splunk

Data modeling

Correlation searches

Dashboard development

Security analytics

Vulnerability management data

SCCA

VDMS

Splunk Enterprise

Tools

Splunk Enterprise

SCCA

VDMS

Job description

Key Responsibilities

• Leverage Splunk within the DoD Secure Cloud Computing Architecture (SCCA) Virtual Datacenter Management Stack (VDMS) log management infrastructure to ingest, normalize, and analyze security event logs, system telemetry, and vulnerability data across cloud-hosted applications.
• Build advanced data models and correlation searches to bridge infrastructure-level logs with application-level visibility, supporting DoD cloud governance and reporting initiatives.
• Deliver actionable analytics and compliance reporting that tracks workload health, security posture, and remediation progress within defense cloud environments.
• Analyze vulnerability, security, application, and infrastructure data within Splunk.
• Develop and maintain dashboards, reports, scorecards, and metrics that provide actionable cybersecurity insights.
• Create advanced Splunk searches, data models, and visualizations to support vulnerability management efforts.
• Identify trends, patterns, and emerging risks across enterprise vulnerability data.
• Develop methods to correlate vulnerabilities to applications, systems, business services, and mission functions.
• Improve visibility into vulnerability remediation efforts through tailored reporting and analytics.
• Work with cybersecurity, engineering, and operations teams to understand reporting requirements and develop solutions.
• Create executive-level and operational-level dashboards that communicate risk posture and remediation progress.
• Investigate data quality, data normalization, and reporting challenges to improve the accuracy and usefulness of metrics.
• Develop recurring and ad hoc reports supporting cybersecurity compliance and operational decision-making.
• Document search logic, reporting methodologies, dashboard designs, and analytic processes.
• Provide recommendations for improving vulnerability reporting, data categorization, and application-level visibility.

• Active Secret Clearance required.
• IAT II (Security+) or higher-level certification required.
• Familiarity with DoD Secure Cloud Computing Architecture (SCCA) and VDMS centralized logging and monitoring practices.
• Experience analyzing large-scale log datasets and security telemetry originating from enterprise defense cloud platforms.
• Strong experience working with Splunk in an analytics, reporting, cybersecurity, or operations environment.
• Strong experience creating Splunk searches, reports, dashboards, visualizations, and alerts.
• Experience analyzing cybersecurity and vulnerability management data.
• Understanding of vulnerability management concepts, CVEs, patch management, and remediation workflows.
• Experience working with large datasets and identifying trends, anomalies, and patterns.
• Ability to translate stakeholder requirements into meaningful metrics and reporting solutions.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Splunk-related certification highly desired.

Benefits

We offer full-time salaried employees competitive salaries with a range of benefits, including:

• Medical, Dental, & Vision
• Life Insurance, Short-term Disability, Long-term Disability
• SIMPLE IRA with Company Match
• Federal Holidays
• Vacation & Sick Leave

Enterprise Horizon Consulting Group is an equal opportunity employer. Enterprise Horizon Consulting Group does not discriminate against any employee or applicant for employment on the basis of race, color, religion, sex, marital status, sexual orientation, gender identity, national origin, ancestry, age (40 and over), physical or mental disability, or protected veteran status, or any other protected status in accordance with all applicable federal, state and local laws.