SIEM & Security Operations Analyst

About the role

We are seeking a Security Operations Analyst to support and maintain critical security infrastructure and monitoring capabilities for our government client. This role will focus on analyzing security data, supporting incident response operations, and maintaining security platforms and supporting infrastructure. The ideal candidate will have a strong background in data analysis within a cybersecurity or IT operations context.

Responsibilities

• Support day-to-day operations of security infrastructure platforms, including SIEM and data pipeline tools
• Analyze, normalize, and interpret large volumes of security and operational data to support incident detection and response
• Monitor, maintain, and troubleshoot Splunk environments and associated data sources
• Support data ingestion and routing using Cribl
• Track and support security incidents and waivers through the internal IRT Portal
• Manage and update documentation in internal and external MediaWiki knowledge bases
• Interface with stakeholders using ServiceNow for incident, request, and change tracking
• Support infrastructure hosted on VMWare ESXi and AWS environments, including forensic and red teaming resources
• Assist with log management, data quality checks, and reporting for security operations
• Collaborate with security engineers, incident responders, and IT teams to ensure platform stability and data integrity
• Support environments consisting of a mix of Linux and Windows servers

Required Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, Data Analytics, or a related field
• 4+ years of experience in a data analyst, security operations, or infrastructure support role
• Hands-on experience working with SIEM tools, preferably Splunk
• Experience with data pipelines and log routing tools (e.g., Cribl)
• Familiarity with IT service management tools such as ServiceNow
• Experience supporting or working within virtualized and cloud environments (VMWare, AWS)
• Strong analytical skills with the ability to interpret and communicate complex data findings

Technical Environment

• SIEM: Splunk
• Data Pipeline: Cribl
• IT Ticketing: ServiceNow
• Security Incident/Waiver Portal: IRT Portal (homegrown)
• Knowledge Bases: MediaWiki (internal and external)
• Infrastructure: VMWare ESXi
• Cloud: AWS STRIDES account (Splunk, forensic EC2 instances, red teaming development lab)
• Operating Systems: Linux and Windows

Pay

The salary is budgeted at $80,000–$95,000 annually.

Benefits

• Medical, dental and vision insurance
• 401k matching
• PTO
• Certification reimbursement