Cybersecurity Analyst Intermediate w/Splunk

Accountabilities

Cybersecurity monitoring and risk management: Gather and analyze technical information about IT infrastructure, organizational requirements, and existing security solutions to identify risks and strengthen the security posture of applications and databases.
Splunk administration and analytics: Design, configure, and maintain Splunk dashboards, reports, data models, and visualizations to monitor security events, highlight application and database alerts, and improve operational visibility.
Advanced search and investigation: Develop and optimize complex Splunk search queries to identify data patterns, investigate anomalies, support forensic analysis, and provide actionable security intelligence.
Vulnerability management: Execute and interpret vulnerability scans, investigate identified weaknesses, and collaborate with system owners and technical teams to prioritize and remediate security issues.
Application and database security: Assess and secure applications and databases, including Oracle and Microsoft SQL Server environments, while applying appropriate security configurations and access controls.
Security standards and compliance: Support the development and implementation of security policies, procedures, configuration standards, logging requirements, and information assurance practices aligned with applicable government mandates.
Security infrastructure management: Develop and maintain documentation covering Splunk infrastructure, system configurations, operational procedures, security controls, and existing or newly implemented systems.
Technical troubleshooting: Diagnose security and system issues, investigate root causes, recommend corrective actions, and help optimize the performance and reliability of security monitoring solutions.
Cross-functional collaboration: Work closely with application delivery teams, system owners, and government stakeholders to address emerging risks, adapt to changing requirements, and support secure technology operations.
Requirements
Education and experience: A bachelor's degree in Computer Science, Information Systems, Engineering, Business, or a related discipline, combined with at least five years of relevant professional experience in defining security requirements. Candidates without a degree must have approximately six to eight years of relevant experience.
Splunk expertise: At least 3.5 years of hands-on experience in Splunk design and administration, including dashboard development, advanced searches, reporting, data visualization, and performance optimization.
Cybersecurity fundamentals: Knowledge of common hacking techniques, malware threats, security vulnerabilities, and effective countermeasures, along with an understanding of information assurance and enterprise security practices.
Database security: Experience working with Oracle and Microsoft SQL Server databases, particularly their security configurations and related risk management requirements.
Security tools: Familiarity with security information and event management (SIEM) systems, vulnerability assessment tools, antivirus solutions, intrusion detection and prevention systems, firewalls, and Active Directory.
Technical problem-solving: Strong analytical and diagnostic abilities, with the capacity to investigate complex technical issues, interpret security data, and recommend practical solutions.
Communication and organization: Excellent documentation and communication skills, attention to detail, and the ability to manage multiple assignments while adapting to evolving client priorities.
Teamwork: Ability to collaborate effectively with multidisciplinary technical teams and stakeholders in a structured, mission-focused environment.
Citizenship and background screening: U.S. citizenship is required. Candidates must be able to obtain and maintain a Department of Energy (DOE) clearance and successfully complete the required government background investigation, including detailed forms and fingerprinting.
Preferred qualifications: A Splunk Enterprise Administrator certification; experience with Trustwave DBProtect and Burp Suite; familiarity with enterprise application, system, and network security best practices; and previous experience supporting the Department of Energy or similar government environments.
Benefits
Annual salary: Estimated range of $127,500–$172,500, depending on experience, geographic location, and applicable contractual requirements. Actual compensation may fall outside this range.
Remote work: Fully remote work arrangement available to candidates located in the United States.
Work-life balance: Flexible workweek options and a range of paid leave programs.
Paid time off: Typically 15 days of paid leave per calendar year for new employees, prorated based on hire date, plus 10 paid holidays annually.
Family support: Eligible employees may receive up to 160 hours of paid family leave within a rolling 12-month period.
Healthcare coverage: Multiple medical plan options, including plans with Health Savings Accounts, as well as dental and vision insurance.
Retirement savings: 401(k) retirement plan with employer matching contributions.
Income and life protection: Short- and long-term disability coverage, life insurance, accidental death and dismemberment insurance, and additional voluntary protection options.
Additional leave programs: Paid parental, military, bereavement, jury duty, sick, vacation, and personal leave, subject to applicable policies and eligibility.
Career development: Opportunities for internal mobility, professional growth, and collaboration with experienced cybersecurity and technology professionals.
Performance recognition: Employee rewards programs recognizing high performance and contributions.