Splunk Data Analyst

Enterprise Horizon Consulting Group is seeking a Splunk Data Analyst to support enterprise cybersecurity and vulnerability management initiatives. This role will focus on analyzing data within Splunk, developing meaningful metrics, identifying trends, and creating reporting capabilities that provide actionable insight to security and operational stakeholders.

The ideal candidate will have strong experience working with Splunk data, creating complex searches and dashboards, and transforming large volumes of vulnerability information into meaningful reporting. A key objective of this role will be to help stakeholders better understand vulnerability data at the application level by developing searches, reports, dashboards, and analytical solutions that correlate vulnerabilities to specific applications, systems, and mission impacts.

Key Responsibilities

• Leverage Splunk within the DoD Secure Cloud Computing Architecture (SCCA) Virtual Datacenter Management Stack (VDMS) log management infrastructure to ingest, normalize, and analyze security event logs, system telemetry, and vulnerability data across cloud-hosted applications.
• Build advanced data models and correlation searches to bridge infrastructure-level logs with application-level visibility, supporting DoD cloud governance and reporting initiatives.
• Deliver actionable analytics and compliance reporting that tracks workload health, security posture, and remediation progress within defense cloud environments.
• Analyze vulnerability, security, application, and infrastructure data within Splunk.
• Develop and maintain dashboards, reports, scorecards, and metrics that provide actionable cybersecurity insights.
• Create advanced Splunk searches, data models, and visualizations to support vulnerability management efforts.
• Identify trends, patterns, and emerging risks across enterprise vulnerability data.
• Develop methods to correlate vulnerabilities to applications, systems, business services, and mission functions.
• Improve visibility into vulnerability remediation efforts through tailored reporting and analytics.
• Work with cybersecurity, engineering, and operations teams to understand reporting requirements and develop solutions.
• Create executive-level and operational-level dashboards that communicate risk posture and remediation progress.
• Investigate data quality, data normalization, and reporting challenges to improve the accuracy and usefulness of metrics.
• Develop recurring and ad hoc reports supporting cybersecurity compliance and operational decision-making.
• Document search logic, reporting methodologies, dashboard designs, and analytic processes.
• Provide recommendations for improving vulnerability reporting, data categorization, and application-level visibility.

Requirements

• Active Secret Clearance required.
• IAT II (Security+) or higher-level certification required.
• Familiarity with DoD Secure Cloud Computing Architecture (SCCA) and VDMS centralized logging and monitoring practices.
• Experience analyzing large-scale log datasets and security telemetry originating from enterprise defense cloud platforms.
• Strong experience working with Splunk in an analytics, reporting, cybersecurity, or operations environment.
• Strong experience creating Splunk searches, reports, dashboards, visualizations, and alerts.
• Experience analyzing cybersecurity and vulnerability management data.
• Understanding of vulnerability management concepts, CVEs, patch management, and remediation workflows.
• Experience working with large datasets and identifying trends, anomalies, and patterns.
• Ability to translate stakeholder requirements into meaningful metrics and reporting solutions.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Splunk-related certification highly desired.