Principal Splunk Analyst (Principal Cyber Security Analyst)

Mission Support & Test Services, LLC (MSTS) • North Las Vegas, NV

23h • $118,560 - $180,814 • Onsite

About The Position

MSTS is seeking an experienced Principal Splunk Analyst to help safeguard company infrastructure from cyber threats and attacks. The position delivers solutions that enhance the Cyber Security section’s ability to detect threat activity and system intrusions. It is responsible for Splunk development and configuration, including system deployment, Splunk application implementation, data onboarding, and integrations.

The role manages and develops the organization’s Splunk environment and premium applications, including Enterprise Security, SOAR, and ITSI. It also develops SOAR playbooks, creates custom Splunk solutions, supports threat hunting and vulnerability mitigation, and contributes to cybersecurity compliance, continuous monitoring, and audit reporting. The position is based at the Losee Road facility in North Las Vegas, Nevada, with a Monday-through-Thursday 4/10 schedule that is subject to change.

Employment is contingent on required pre-employment screening and the ability to obtain and maintain a DOE Q-level security clearance. The role requires U.S. citizenship for clearance eligibility, a valid driver’s license, and compliance with drug testing and federal background-investigation requirements. The annual salary range is $118,560.00–$180,814.40, with starting salary determined by market value, candidate education and experience, and internal equity.

Requirements

• Bachelor’s degree or equivalent training and experience in a computer-related field, and at least 8 years of related experience.
• Ability to deploy, configure, and manage large-scale clustered Splunk environments using a command-line interface.
• Ability to onboard diverse data sources using different input techniques and centralized logging and filtering methods such as syslog.
• Ability to develop and maintain comprehensive health monitoring for large Splunk deployments and associated data sources.
• Strong IT background that includes Linux administration, networking fundamentals, and core cybersecurity principles, protocols, and standards.
• Proficiency in DevOps practices and tools, including Git, Jenkins, Ansible, and Jira, and configuration management in production environments.
• Software engineering experience with modern programming languages such as Python, Bash, or PowerShell; design patterns; TDD; debugging; and Agile methodologies.
• Ability to develop SOAR playbooks and Splunk ITSI solutions, including service visualizations and network anomaly analysis, while following security compliance frameworks and best practices.
• Ability to maintain strict confidentiality.
• Effective spoken and written English communication skills for communicating with coworkers and customers, writing clear reports, and gathering and collecting information.
• Ability to use multiple electronic devices, including standard office machines, cellular phones, and security appliances.
• General understanding of cybersecurity controls used to mitigate vulnerabilities.
• Must possess a valid driver’s license.
• Must be able to obtain and maintain a DOE Q-level security clearance; U.S. citizenship and at least 18 years of age are required for clearance eligibility.
• Must complete required pre-employment drug testing and background reviews, and be eligible for access to classified matter. Subsequent reinvestigations and a counterintelligence evaluation, potentially including a polygraph examination, may be required.
• Must undergo a pre-placement physical examination, including a drug screen; random drug testing may also occur.

Nice To Haves

• Splunk Enterprise Certified Architect certification.
• Splunk Enterprise Security Certified Administrator certification.
• Splunk SOAR Certified Automation Developer certification.
• Splunk IT Service Intelligence Certified Administrator certification.

Responsibilities

• Manage the organization’s Splunk environment, including the license manager, indexers, and search heads.
• Lead Splunk development and configuration activities, including system deployment, application implementation, data onboarding, and integrations.
• Mature and maintain premium Splunk applications, including Enterprise Security, SOAR, and ITSI, and research applications to modernize deployments.
• Develop SOAR playbooks to reduce security incident response time and develop advanced techniques to identify and mitigate vulnerabilities.
• Collaboratively design and implement custom Splunk solutions that meet project requirements.
• Apply established standards, practices, and procedures to solve problems and complete projects.
• Review cybersecurity threat information and assist the Threat Hunter team with mitigating identified vulnerabilities.
• Collaborate with Counterintelligence, other DOE sites, US CERT, and law enforcement.
• Assist with data calls, FISMA reporting, compliance scanning and reporting, continuous monitoring, and auditor reports.
• Perform other duties assigned by Management.

Benefits

• Medical, dental, and vision coverage.
• Pension and 401(k).
• Paid time off and 96 hours of paid holidays.
• Relocation assistance for employees located more than 75 miles from the work location.
• Tuition assistance and reimbursement.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal