Splunk Data Analyst

Enterprise Horizon Consulting Group•Mechanicsburg, PA

About The Position

Enterprise Horizon Consulting Group is seeking a Splunk Data Analyst to support enterprise cybersecurity and vulnerability management initiatives. The role focuses on analyzing Splunk data, developing meaningful metrics, identifying trends, and creating reporting capabilities that provide actionable insights to security and operational stakeholders. The analyst will help stakeholders understand vulnerability data at the application level by developing searches, reports, dashboards, and analytical solutions that correlate vulnerabilities to applications, systems, and mission impacts. The position uses Splunk within the DoD Secure Cloud Computing Architecture (SCCA) Virtual Datacenter Management Stack (VDMS) log management infrastructure to analyze security event logs, system telemetry, and vulnerability data across cloud-hosted applications. The analyst will develop application-level visibility, deliver compliance reporting, improve vulnerability-remediation reporting, and collaborate with cybersecurity, engineering, and operations teams. An active Secret Clearance and an IAT II (Security+) or higher-level certification are required.

Requirements

Active Secret Clearance.
IAT II (Security+) or higher-level certification.
Familiarity with DoD Secure Cloud Computing Architecture (SCCA) and VDMS centralized logging and monitoring practices.
Experience analyzing large-scale log datasets and security telemetry originating from enterprise defense cloud platforms.
Strong experience working with Splunk in an analytics, reporting, cybersecurity, or operations environment.
Strong experience creating Splunk searches, reports, dashboards, visualizations, and alerts.
Experience analyzing cybersecurity and vulnerability management data.
Understanding of vulnerability management concepts, CVEs, patch management, and remediation workflows.
Experience working with large datasets and identifying trends, anomalies, and patterns.
Ability to translate stakeholder requirements into meaningful metrics and reporting solutions.
Strong analytical and problem-solving skills.
Excellent written and verbal communication skills.

Nice To Haves

Splunk-related certification.

Responsibilities

Ingest, normalize, and analyze security event logs, system telemetry, and vulnerability data across cloud-hosted applications using Splunk in the DoD SCCA VDMS log management infrastructure.
Build advanced data models and correlation searches connecting infrastructure-level logs with application-level visibility.
Deliver analytics and compliance reporting that tracks workload health, security posture, and remediation progress in defense cloud environments.
Analyze vulnerability, security, application, and infrastructure data within Splunk.
Develop and maintain dashboards, reports, scorecards, and metrics that provide actionable cybersecurity insights.
Create advanced Splunk searches, data models, and visualizations for vulnerability management.
Identify trends, patterns, and emerging risks across enterprise vulnerability data.
Develop methods to correlate vulnerabilities to applications, systems, business services, and mission functions.
Improve visibility into vulnerability remediation through tailored reporting and analytics.
Work with cybersecurity, engineering, and operations teams to understand reporting requirements and develop solutions.
Create executive-level and operational-level dashboards communicating risk posture and remediation progress.
Investigate data quality, data normalization, and reporting challenges to improve metric accuracy and usefulness.
Develop recurring and ad hoc reports supporting cybersecurity compliance and operational decision-making.
Document search logic, reporting methodologies, dashboard designs, and analytical processes.
Recommend improvements to vulnerability reporting, data categorization, and application-level visibility.