Cybersecurity Analyst Intermediate w/Splunk

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cybersecurity Analyst Intermediate w/Splunk based in the United States. Join a mission-driven cybersecurity team protecting critical government business applications and sensitive data. In this remote role, you will leverage Splunk and other security tools to strengthen application, database, and infrastructure security. You will analyze security events, identify vulnerabilities, and develop dashboards and reports that turn complex data into actionable insights. Working alongside application delivery teams and government stakeholders, you will help reduce cyber risks and improve security compliance. You will contribute to security monitoring, vulnerability management, digital forensics, and incident investigation activities. This opportunity combines hands-on technical expertise, meaningful public-sector impact, and collaboration within a multidisciplinary technology environment. If you are passionate about cybersecurity analytics and continuous improvement, this role offers the opportunity to help protect systems supporting important national priorities.

Cybersecurity monitoring and risk management: Gather and analyze technical information about IT infrastructure, organizational requirements, and existing security solutions to identify risks and strengthen the security posture of applications and databases. Splunk administration and analytics: Design, configure, and maintain Splunk dashboards, reports, data models, and visualizations to monitor security events, highlight application and database alerts, and improve operational visibility. Advanced search and investigation: Develop and optimize complex Splunk search queries to identify data patterns, investigate anomalies, support forensic analysis, and provide actionable security intelligence. Vulnerability management: Execute and interpret vulnerability scans, investigate identified weaknesses, and collaborate with system owners and technical teams to prioritize and remediate security issues. Application and database security: Assess and secure applications and databases, including Oracle and Microsoft SQL Server environments, while applying appropriate security configurations and access controls. Security standards and compliance: Support the development and implementation of security policies, procedures, configuration standards, logging requirements, and information assurance practices aligned with applicable government mandates. Security infrastructure management: Develop and maintain documentation covering Splunk infrastructure, system configurations, operational procedures, security controls, and existing or newly implemented systems. Technical troubleshooting: Diagnose security and system issues, investigate root causes, recommend corrective actions, and help optimize the performance and reliability of security monitoring solutions. Cross-functional collaboration: Work closely with application delivery teams, system owners, and government stakeholders to address emerging risks, adapt to changing requirements, and support secure technology operations. Requirements Education and experience: A bachelor's degree in Computer Science, Information Systems, Engineering, Business, or a related discipline, combined with at least five years of relevant professional experience in defining security requirements. Candidates without a degree must have approximately six to eight years of relevant experience. Splunk expertise: At least 3.5 years of hands-on experience in Splunk design and administration, including dashboard development, advanced searches, reporting, data visualization, and performance optimization. Cybersecurity fundamentals: Knowledge of common hacking techniques, malware threats, security vulnerabilities, and effective countermeasures, along with an understanding of information assurance and enterprise security practices. Database security: Experience working with Oracle and Microsoft SQL Server databases, particularly their security configurations and related risk management requirements. Security tools: Familiarity with security information and event management (SIEM) systems, vulnerability assessment tools, antivirus solutions, intrusion detection and prevention systems, firewalls, and Active Directory. Technical problem-solving: Strong analytical and diagnostic abilities, with the capacity to investigate complex technical issues, interpret security data, and recommend practical solutions. Communication and organization: Excellent documentation and communication skills, attention to detail, and the ability to manage multiple assignments while adapting to evolving client priorities. Teamwork: Ability to collaborate effectively with multidisciplinary technical teams and stakeholders in a structured, mission-focused environment. Citizenship and background screening: U.S. citizenship is required. Candidates must be able to obtain and maintain a Department of Energy (DOE) clearance and successfully complete the required government background investigation, including detailed forms and fingerprinting. Preferred qualifications: A Splunk Enterprise Administrator certification; experience with Trustwave DBProtect and Burp Suite; familiarity with enterprise application, system, and network security best practices; and previous experience supporting the Department of Energy or similar government environments. Benefits Annual salary: Estimated range of $127,500–$172,500 , depending on experience, geographic location, and applicable contractual requirements. Actual compensation may fall outside this range. Remote work: Fully remote work arrangement available to candidates located in the United States. Work-life balance: Flexible workweek options and a range of paid leave programs. Paid time off: Typically 15 days of paid leave per calendar year for new employees, prorated based on hire date, plus 10 paid holidays annually. Family support: Eligible employees may receive up to 160 hours of paid family leave within a rolling 12-month period. Healthcare coverage: Multiple medical plan options, including plans with Health Savings Accounts, as well as dental and vision insurance. Retirement savings: 401(k) retirement plan with employer matching contributions. Income and life protection: Short- and long-term disability coverage, life insurance, accidental death and dismemberment insurance, and additional voluntary protection options. Additional leave programs: Paid parental, military, bereavement, jury duty, sick, vacation, and personal leave, subject to applicable policies and eligibility. Career development: Opportunities for internal mobility, professional growth, and collaboration with experienced cybersecurity and technology professionals. Performance recognition: Employee rewards programs recognizing high performance and contributions.