TS/SCI Cyber & IT Operations Analytics Engineer

KDA Consulting Inc; Herndon (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

KDA Consulting Inc. seeks a hands-on Cyber & IT Operations Data / Splunk Analytics Engineer to advance data modernization across security and IT telemetry.

You will design ingest pipelines, build Splunk models, and deliver observable dashboards for threat analysis and reliable IT operations. Responsibilities include data quality normalization to CIM standards, configuring Splunk architecture, and engineering telemetry pipelines with forwarders, HEC, NiFi, or Kafka in an Agile environment.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.
• Active TS/SCI with polygraph clearance is required.
• Hands-on experience with Splunk Enterprise and distributed deployments.
• Experience with CIM standardization, data normalization, and telemetry pipelines.
• Strong scripting skills (Python, Bash) for automation.
• Experience with Linux system administration and cloud environments (AWS).

Responsibilities

• Standardize, cleanse, and normalize streaming cyber and IT telemetry into CIM-compliant schemas.
• Configure and manage distributed Splunk infrastructure (Heavy Forwarders, Indexers, Search Heads).
• Develop SPL queries, accelerated data models, and real-time alerts for threat detection and IT ops health.
• Design ingestion pipelines (Splunk inputs, HEC, NiFi, Kafka) for logs, metrics, and traces.
• Build dashboards translating security events and operational health into actionable insights.
• Collaborate with platform/cloud engineers to integrate datasets for ML and analytics tooling.

Skills

Splunk analytics

Data quality

ETL pipelines

SPL queries

Dashboards

Python/ Bash

Linux administration

AWS cloud

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Splunk

Apache NiFi

Kafka

HTTP Event Collector (HEC)

Prop.conf / transforms.conf

Job description

KDA Consulting Inc. seeks a hands-on Cyber & IT Operations Data / Splunk Analytics Engineer to advance data modernization across security and IT telemetry.

You will design ingest pipelines, build Splunk models, and deliver observable dashboards for threat analysis and reliable IT operations. Responsibilities include data quality normalization to CIM standards, configuring Splunk architecture, and engineering telemetry pipelines with forwarders, HEC, NiFi, or Kafka in an Agile environment.