Principal Splunk Analyst (Principal Cyber Security Analyst) (Splunk)

Location: Losee Road facility, North Las Vegas, Nevada, United States; onsite 4/10 schedule, Monday through Thursday.

Salary: $118,560.00–$180,814.40 annual.

Company

Mission Support and Test Services, LLC manages and operates the hirify.global for the U.S. National Nuclear Security Administration and the Department of Energy.

What you will do

• Manage the Splunk environment, including license management, indexers, and search heads.
• Lead Splunk deployment, application implementation, data onboarding, integrations, and custom solution development.
• Maintain and mature Splunk Enterprise Security, SOAR, and ITSI applications and research modernization opportunities.
• Develop SOAR playbooks and advanced methods to identify, mitigate, and respond to vulnerabilities and incidents.
• Review cyber threat information and collaborate with threat hunters, counterintelligence, DOE sites, US CERT, and law enforcement.
• Support FISMA reporting, compliance scanning, continuous monitoring, data calls, and auditor reports.

Requirements

• Bachelor’s degree or equivalent computer-related training and experience, plus at least 8 years of related experience.
• Ability to deploy, configure, and manage large-scale clustered Splunk environments through the command-line interface.
• Experience onboarding diverse data sources using multiple input techniques and centralized logging or filtering methods such as syslog.
• Ability to develop and maintain health monitoring for large Splunk deployments and associated data sources.
• Strong IT background covering Linux administration, networking fundamentals, cybersecurity principles, protocols, and standards.
• Experience with DevOps practices and tools including Git, Jenkins, Ansible, Jira, and production configuration management.
• Software engineering experience with Python, Bash, or PowerShell; design patterns, TDD, debugging, and Agile methodologies.
• Ability to develop SOAR playbooks and Splunk ITSI solutions, including service visualizations and network anomaly analysis, while following security compliance frameworks and best practices.
• Ability to maintain strict confidentiality, communicate effectively in English, use standard office and security equipment, and understand cybersecurity controls for vulnerability mitigation.
• Valid driver’s license and ability to obtain and maintain a DOE Q-level security clearance; clearance eligibility requires U.S. citizenship and being at least 18 years old.

Nice to have

• Splunk Enterprise Certified Architect certification.
• Splunk Enterprise Security Certified Administrator certification.
• Splunk SOAR Certified Automation Developer certification.
• Splunk IT Service Intelligence Certified Administrator certification.

Culture & Benefits

• Full-time employment with medical, dental, and vision coverage, pension, 401(k), paid time off, and 96 hours of paid holidays.
• Tuition assistance and reimbursement.
• Relocation support may be available when located more than 75 miles from the work location.
• Pre-placement physical examination and drug screen are required; random drug testing applies under the substance abuse policy.
• Employment includes background, reference, credit, law-enforcement, and employment or education verification; classified work may require counterintelligence evaluation and reinvestigation.

Hiring process

• Upload preferred certification documents when applying.
• Selected candidates must complete the required drug testing, federal background investigation, and clearance eligibility procedures.