Cyber Security Analyst III (Splunk SIEM Engineering & Development)

OSC Global

71d • $89,596 - $158,000

About The Position

The Cyber Security Analyst III is responsible for maintaining and enhancing Splunk dashboards, alerts and data integrations that strengthen enterprise threat detection and response. The role collaborates closely with experienced engineers and cybersecurity operations teams to ensure the SIEM environment delivers actionable insights, meets compliance obligations and runs reliably in a complex, regulated environment.

Requirements

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field.
• At least five (5) years of progressive experience in information technology or cybersecurity.
• Two plus (2+) years of direct, hands-on experience with Splunk Enterprise or Splunk ES.
• Ability to pass a background and drug screening.
• Must have identification compliant with the Real ID Act at time of hire.
• Must be able to obtain Department of Energy access badge.
• Must be able to obtain and maintain a U.S. government security clearance.

Nice To Haves

• Splunk Certifications such as Core Certified Power User, Enterprise Certified Admin, or ES Certified Admin.
• Experience with Python scripting, API integrations, or SOAR platforms (Cortex XSOAR, Phantom, etc.).
• Exposure to cloud logging from AWS or Azure.
• Experience supporting cybersecurity operations in a federal or highly regulated environment.

Responsibilities

• Build and maintain Splunk dashboards, reports, and correlation searches to improve visibility into security events.
• Help onboard, parse, and normalize log data from various sources (firewalls, endpoints, servers, cloud environments).
• Participate in regular Splunk health checks, monitor ingestion pipelines, and assist in troubleshooting performance or parsing issues.
• Contribute to the development of basic automation scripts and workflows under the direction of senior engineers.
• Work closely with security operations and IT teams to understand their needs and turn them into actionable Splunk solutions.
• Maintain accurate configuration records, standard operating procedures, and change logs.
• Ensure SIEM operations and configurations remain consistent with NIST SP 800-53, FISMA, and internal cybersecurity requirements.
• Stay current on Splunk capabilities, industry trends, and best practices to help advance team maturity.

Benefits

• Paid holidays
• Paid time off
• 401k with employer match
• Dental insurance
• Vision insurance
• Health insurance plans through the Federal Employee Health Benefits (FEHB) program
• Life and disability benefits

What This Job Offers

• Career Level: Mid Level
• Education Level: Bachelor's degree