Splunk Data Analyst

Enterprise Horizon Consulting Group; Oregon; Hybrid; USD 95,000 - 125,000; Full time

Benefits offered by this job

Medical, Dental, & Vision

Life Insurance

SIMPLE IRA with Company Match

Federal Holidays

Vacation & Sick Leave

$500 Referral Bonus

Job summary

Enterprise Horizon Consulting Group is seeking a Splunk Data Analyst to support enterprise cybersecurity and vulnerability management initiatives. The role focuses on analyzing Splunk data, developing meaningful metrics, identifying trends, and creating reporting capabilities for security and operational stakeholders.

The ideal candidate will develop complex searches, dashboards, and data models to correlate vulnerabilities to applications and systems, delivering actionable insights for

Qualifications

• Active Secret Clearance required.
• IAT II (Security+) or higher-level certification required.
• Familiarity with DoD Secure Cloud Computing Architecture (SCCA) and VDMS centralized logging and monitoring practices.
• Experience analyzing large-scale log datasets and security telemetry from enterprise defense cloud platforms.
• Strong Splunk analytics, reporting, dashboards, visualizations, and alerts.

Responsibilities

• Ingest, normalize, and analyze security logs, system telemetry, and vulnerability data in Splunk.
• Build advanced data models and correlation searches bridging logs with application-level visibility.
• Deliver analytics and compliance reporting tracking workload health, security posture, and remediation progress.
• Analyze vulnerability, security, application, and infrastructure data within Splunk.
• Develop and maintain dashboards, reports, scorecards, and metrics for cybersecurity insights.
• Create advanced Splunk searches, data models, and visualizations for vulnerability management.
• Identify trends, patterns, and emerging risks across enterprise vulnerability data.
• Correlate vulnerabilities to applications, systems, business services, and mission functions.
• Improve visibility into remediation efforts through tailored reporting and analytics.
• Collaborate with cybersecurity, engineering, and operations teams to understand reporting requirements and develop solutions.
• Create executive-level and operational dashboards communicating risk posture and remediation progress.
• Investigate data quality, normalization, and reporting challenges to improve metric accuracy.
• Develop recurring and ad hoc reports supporting cybersecurity compliance and operational decision-making.
• Document search logic, reporting methodologies, dashboard designs, and analytic processes.
• Provide recommendations for improving vulnerability reporting, data categorization, and application-level visibility.

Skills

Splunk

Data analysis

Dashboards

Vulnerability data

DoD compliance

Analytical thinking

Communication

Tools

Splunk

Job description

Enterprise Horizon Consulting Group is seeking a Splunk Data Analyst to support enterprise cybersecurity and vulnerability management initiatives. This role will focus on analyzing data within Splunk, developing meaningful metrics, identifying trends, and creating reporting capabilities that provide actionable insight to security and operational stakeholders.The ideal candidate will have strong experience working with Splunk data, creating complex searches and dashboards, and transforming large volumes of vulnerability information into meaningful reporting. A key objective of this role will be to help stakeholders better understand vulnerability data at the application level by developing searches, reports, dashboards, and analytical solutions that correlate vulnerabilities to specific applications, systems, and mission impacts.

Key Responsibilities

• Leverage Splunk within the DoD Secure Cloud Computing Architecture (SCCA) Virtual Datacenter Management Stack (VDMS) log management infrastructure to ingest, normalize, and analyze security event logs, system telemetry, and vulnerability data across cloud-hosted applications.
• Build advanced data models and correlation searches to bridge infrastructure-level logs with application-level visibility, supporting DoD cloud governance and reporting initiatives.
• Deliver actionable analytics and compliance reporting that tracks workload health, security posture, and remediation progress within defense cloud environments.
• Analyze vulnerability, security, application, and infrastructure data within Splunk.
• Develop and maintain dashboards, reports, scorecards, and metrics that provide actionable cybersecurity insights.
• Create advanced Splunk searches, data models, and visualizations to support vulnerability management efforts.
• Identify trends, patterns, and emerging risks across enterprise vulnerability data.
• Develop methods to correlate vulnerabilities to applications, systems, business services, and mission functions.
• Improve visibility into vulnerability remediation efforts through tailored reporting and analytics.
• Work with cybersecurity, engineering, and operations teams to understand reporting requirements and develop solutions.
• Create executive-level and operational-level dashboards that communicate risk posture and remediation progress.
• Investigate data quality, data normalization, and reporting challenges to improve the accuracy and usefulness of metrics.
• Develop recurring and ad hoc reports supporting cybersecurity compliance and operational decision-making.
• Document search logic, reporting methodologies, dashboard designs, and analytic processes.
• Provide recommendations for improving vulnerability reporting, data categorization, and application-level visibility.

Requirements

• Active Secret Clearance required.
• IAT II (Security+) or higher-level certification required.
• Familiarity with DoD Secure Cloud Computing Architecture (SCCA) and VDMS centralized logging and monitoring practices.
• Experience analyzing large-scale log datasets and security telemetry originating from enterprise defense cloud platforms.
• Strong experience working with Splunk in an analytics, reporting, cybersecurity, or operations environment.
• Strong experience creating Splunk searches, reports, dashboards, visualizations, and alerts.
• Experience analyzing cybersecurity and vulnerability management data.
• Understanding of vulnerability management concepts, CVEs, patch management, and remediation workflows.
• Experience working with large datasets and identifying trends, anomalies, and patterns.
• Ability to translate stakeholder requirements into meaningful metrics and reporting solutions.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Splunk-related certification highly desired.

BenefitsBenefitsWe offer full-time salaried employees competitive salaries with a range of benefits, including:

• Medical, Dental, & Vision
• Life Insurance, Short-term Disability, Long-term Disability
• SIMPLE IRA with Company Match
• Federal Holidays
• Vacation & Sick Leave

$500 Referral Bonus

Enterprise Horizon Consulting Group is an equal opportunity employer. Enterprise Horizon Consulting Group does not discriminate against any employee or applicant for employment on the basis of race, color, religion, sex, marital status, sexual orientation, gender identity, national origin, ancestry, age (40 and over), physical or mental disability, or protected veteran status, or any other protected status in accordance with all applicable federal, state and local laws.