Splunk Data Analyst – DoD Cloud Security Analytics

Enterprise-Horizon-Consulting-Group; Mechanicsburg (Cumberland County); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical, Dental, & Vision

Life Insurance

SIMPLE IRA with Company Match

Federal Holidays

Vacation & Sick Leave

Job summary

Enterprise Horizon Consulting Group is seeking a cybersecurity data analyst to leverage Splunk within the DoD Secure Cloud Computing Architecture (SCCA) VDMS for ingestion, normalization, and analysis of security logs across cloud-hosted applications.

The role involves building data models, dashboards, and reports to support governance, risk, and remediation efforts within defense cloud environments, with strong emphasis on vulnerability management and executive-level visibility.

Qualifications

• Active Secret Clearance required.
• IAT II (Security+) or higher-level certification required.
• Familiarity with DoD Secure Cloud Computing Architecture (SCCA) and VDMS centralized logging and monitoring practices.
• Experience analyzing large-scale log datasets and security telemetry originating from enterprise defense cloud platforms.
• Strong experience working with Splunk in an analytics, reporting, cybersecurity, or operations environment.
• Strong experience creating Splunk searches, reports, dashboards, visualizations, and alerts.
• Experience analyzing cybersecurity and vulnerability management data.
• Understanding of vulnerability management concepts, CVEs, patch management, and remediation workflows.
• Experience working with large datasets and identifying trends, anomalies, and patterns.
• Ability to translate stakeholder requirements into meaningful metrics and reporting solutions.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Splunk-related certification highly desired.

Responsibilities

• Leverage Splunk within the DoD Secure Cloud Computing Architecture (SCCA) VDMS log management infrastructure to ingest, normalize, and analyze security event logs, system telemetry, and vulnerability data across cloud-hosted applications.
• Build advanced data models and correlation searches to bridge infrastructure-level logs with application-level visibility, supporting DoD cloud governance and reporting initiatives.
• Deliver actionable analytics and compliance reporting that tracks workload health, security posture, and remediation progress within defense cloud environments.
• Analyze vulnerability, security, application, and infrastructure data within Splunk.
• Develop and maintain dashboards, reports, scorecards, and metrics that provide actionable cybersecurity insights.
• Create advanced Splunk searches, data models, and visualizations to support vulnerability management efforts.
• Identify trends, patterns, and emerging risks across enterprise vulnerability data.
• Develop methods to correlate vulnerabilities to applications, systems, business services, and mission functions.
• Improve visibility into vulnerability remediation efforts through tailored reporting and analytics.
• Work with cybersecurity, engineering, and operations teams to understand reporting requirements and develop solutions.
• Create executive-level and operational-level dashboards that communicate risk posture and remediation progress.
• Investigate data quality, data normalization, and reporting challenges to improve the accuracy and usefulness of metrics.
• Develop recurring and ad hoc reports supporting cybersecurity compliance and operational decision-making.
• Document search logic, reporting methodologies, dashboard designs, and analytic processes.
• Provide recommendations for improving vulnerability reporting, data categorization, and application-level visibility.

Job description

Enterprise Horizon Consulting Group is seeking a cybersecurity data analyst to leverage Splunk within the DoD Secure Cloud Computing Architecture (SCCA) VDMS for ingestion, normalization, and analysis of security logs across cloud-hosted applications.

The role involves building data models, dashboards, and reports to support governance, risk, and remediation efforts within defense cloud environments, with strong emphasis on vulnerability management and executive-level visibility.