Splunk Data Analyst

Enterprise Horizon Consulting Group•Mechanicsburg, PA

18h

About The Position

Enterprise Horizon Consulting Group is seeking a Splunk Data Analyst to support enterprise cybersecurity and vulnerability management initiatives. The role analyzes Splunk data, develops meaningful metrics, identifies trends, and creates reporting capabilities that provide actionable insight to security and operational stakeholders. The analyst transforms large volumes of vulnerability information into useful reporting and helps stakeholders understand vulnerability data at the application level by correlating vulnerabilities with applications, systems, and mission impacts. The position uses Splunk within the DoD Secure Cloud Computing Architecture (SCCA) Virtual Datacenter Management Stack (VDMS) log management infrastructure to ingest, normalize, and analyze security event logs, system telemetry, and vulnerability data across cloud-hosted applications. It develops data models and correlation searches, delivers analytics and compliance reporting, and supports visibility into workload health, security posture, and remediation progress in defense cloud environments. The analyst works with cybersecurity, engineering, and operations teams and documents reporting and analytic processes.

Requirements

Active Secret clearance.
IAT II (Security+) or higher-level certification.
Familiarity with DoD Secure Cloud Computing Architecture (SCCA) and VDMS centralized logging and monitoring practices.
Experience analyzing large-scale log datasets and security telemetry from enterprise defense cloud platforms.
Strong experience working with Splunk in an analytics, reporting, cybersecurity, or operations environment.
Strong experience creating Splunk searches, reports, dashboards, visualizations, and alerts.
Experience analyzing cybersecurity and vulnerability management data.
Understanding of vulnerability management concepts, CVEs, patch management, and remediation workflows.
Experience working with large datasets and identifying trends, anomalies, and patterns.
Ability to translate stakeholder requirements into meaningful metrics and reporting solutions.
Strong analytical and problem-solving skills.
Excellent written and verbal communication skills.

Nice To Haves

Splunk-related certification.

Responsibilities

Analyze vulnerability, security, application, and infrastructure data within Splunk.
Develop and maintain dashboards, reports, scorecards, and metrics that provide actionable cybersecurity insights.
Create advanced Splunk searches, data models, correlation searches, and visualizations to support vulnerability management and application-level visibility.
Identify trends, patterns, anomalies, and emerging risks across enterprise vulnerability data.
Develop methods to correlate vulnerabilities with applications, systems, business services, and mission functions.
Improve visibility into vulnerability remediation through tailored reporting and analytics.
Work with cybersecurity, engineering, and operations teams to understand reporting requirements and develop solutions.
Create executive-level and operational-level dashboards communicating risk posture and remediation progress.
Investigate data quality, normalization, and reporting challenges to improve metric accuracy and usefulness.
Develop recurring and ad hoc reports supporting cybersecurity compliance and operational decision-making.
Document search logic, reporting methodologies, dashboard designs, and analytic processes.
Recommend improvements to vulnerability reporting, data categorization, and application-level visibility.
Use Splunk in the DoD SCCA VDMS log management infrastructure to ingest, normalize, and analyze security event logs, system telemetry, and vulnerability data across cloud-hosted applications.
Deliver analytics and compliance reporting tracking workload health, security posture, and remediation progress in defense cloud environments.