Cybersecurity Analyst Intermediate w/Splunk

Accountabilities: Cybersecurity monitoring and risk management: Gather and analyze technical information about IT infrastructure, organizational requirements, and existing security solutions to identify risks and strengthen the security posture of applications and databases. Splunk administration and analytics: Design, configure, and maintain Splunk dashboards, reports, data models, and visualizations to monitor security events, highlight application and database alerts, and improve operational visibility. Advanced search and investigation: Develop and optimize complex Splunk search queries to identify data patterns, investigate anomalies, support forensic analysis, and provide actionable security intelligence. Vulnerability management: Execute and interpret vulnerability scans, investigate identified weaknesses, and collaborate with system owners and technical teams to prioritize and remediate security issues. Application and database security: Assess and secure applications and databases, including Oracle and Microsoft SQL Server environments, while applying appropriate security configurations and access controls. Security standards and compliance: Support the development and implementation of security policies, procedures, configuration standards, logging requirements, and information assurance practices aligned with applicable government mandates. Security infrastructure management: Develop and maintain documentation covering Splunk infrastructure, system configurations, operational procedures, security controls, and existing or newly implemented systems. Technical troubleshooting: Diagnose security and system issues, investigate root causes, recommend corrective actions, and help optimize the performance and reliability of security monitoring solutions. Cross-functional collaboration: Work closely with application delivery teams, system owners, and government stakeholders to address emerging risks, adapt to changing requirements, and support secure technology operations. Requirements Education and experience: A bachelor's degree in Computer Science, Information Systems, Engineering, Business, or a related discipline, combined with at least five years of relevant professional experience in defining security requirements. Candidates without a degree must have approximately six to eight years of relevant experience. Splunk expertise: At least 3.5 years of hands-on experience in Splunk design and administration, including dashboard development, advanced searches, reporting, data visualization, and performance optimization. Cybersecurity fundamentals: Knowledge of common hacking techniques, malware threats, security vulnerabilities, and effective countermeasures, along with an understanding of information assurance and enterprise security practices. Database security: Experience working with Oracle and Microsoft SQL Server databases, particularly their security configurations and related risk management requirements. Security tools: Familiarity with security information and event management (SIEM) systems, vulnerability assessment tools, antivirus solutions, intrusion detection and prevention systems, firewalls, and Active Directory. Technical problem-solving: Strong analytical and diagnostic abilities, with the capacity to investigate complex technical issues, interpret security data, and recommend practical solutions. Communication and organization: Excellent documentation and communication skills, attention to detail, and the ability to manage multiple assignments while adapting to evolving client priorities. Teamwork: Ability to collaborate effectively with multidisciplinary technical teams and stakeholders in a structured, mission-focused environment. Citizenship and background screening: U.S. citizenship is required. Candidates must be able to obtain and maintain a Department of Energy (DOE) clearance and successfully complete the required government background investigation, including detailed forms and fingerprinting. Preferred qualifications: A Splunk Enterprise Administrator certification; experience with Trustwave DBProtect and Burp Suite; familiarity with enterprise application, system, and network security best practices; and previous experience supporting the Department of Energy or similar government environments. Benefits Annual salary: Estimated range of $127,500–$172,500 , depending on experience, geographic location, and applicable contractual requirements. Actual compensation may fall outside this range. Remote work: Fully remote work arrangement available to candidates located in the United States. Work-life balance: Flexible workweek options and a range of paid leave programs. Paid time off: Typically 15 days of paid leave per calendar year for new employees, prorated based on hire date, plus 10 paid holidays annually. Family support: Eligible employees may receive up to 160 hours of paid family leave within a rolling 12-month period. Healthcare coverage: Multiple medical plan options, including plans with Health Savings Accounts, as well as dental and vision insurance. Retirement savings: 401(k) retirement plan with employer matching contributions. Income and life protection: Short- and long-term disability coverage, life insurance, accidental death and dismemberment insurance, and additional voluntary protection options. Additional leave programs: Paid parental, military, bereavement, jury duty, sick, vacation, and personal leave, subject to applicable policies and eligibility. Career development: Opportunities for internal mobility, professional growth, and collaboration with experienced cybersecurity and technology professionals. Performance recognition: Employee rewards programs recognizing high performance and contributions.