Cyber Defense Analyst – Intermediate (Splunk Engineer)

Remote

Full Time

Mid Level

Tangent Technologies is seeking a Cyber Defense Analyst – Intermediate with Splunk experience to support the sustainment and administration of enterprise Splunk SIEM environments. This position focuses on maintaining Splunk infrastructure, onboarding log sources, supporting dashboards and searches, and assisting cybersecurity teams with log analysis.

This role is 100% remote, making it an excellent opportunity for a mid-level Splunk engineer or SOC analyst with Splunk experience who wants to grow their SIEM engineering skills while supporting federal cybersecurity programs.

Key Responsibilities

Support administration and maintenance of Splunk Enterprise environments
Configure and maintain log ingestion and Splunk forwarders
Onboard new data sources, applications, and infrastructure logs
Develop and maintain Splunk dashboards, searches, and reports
Assist with field extractions, log parsing, and normalization
Support cybersecurity teams by running log queries and event analysis
Assist with alert tuning and detection use case development
Troubleshoot Splunk search performance and indexing issues
Maintain documentation related to log sources, dashboards, and monitoring capabilities

Required Qualifications

3–6 years of experience in cybersecurity operations, SIEM administration, or system engineering
Hands-on experience with Splunk Enterprise or similar SIEM platforms
Experience onboarding log sources and configuring Splunk forwarders
Experience creating search queries, dashboards, and reports
Familiarity with Linux or Windows system logs
Understanding of network protocols (TCP/IP, DNS, HTTP)
Strong troubleshooting and documentation skills

Preferred Qualifications

Splunk Power User or Splunk Admin certification
Experience supporting Splunk Enterprise Security
Experience in a Security Operations Center (SOC)
Familiarity with log parsing, regex, or scripting
Experience integrating cloud, endpoint, or network security logs

Federal Suitability and Background Investigation

This position supports a federal financial regulatory agency. Candidates selected for this role will be required to successfully complete a government background investigation prior to beginning employment.

The investigation may include verification of employment history, criminal history, education, and a review of financial responsibility and credit history consistent with federal suitability requirements for individuals supporting financial regulatory agencies.

Employment is contingent upon the candidate’s ability to obtain and maintain the required suitability determination.

Apply for this position

Required*

First Name*

Last Name*

Email Address*

Phone*

Address

Resume*

We've received your resume. Click here to update it.

Attach resume or Paste resume

Attach resume as .pdf, .doc, .docx, .odt, .txt, or .rtf (limit 5MB) or Paste resume

Paste your resume here or Attach resume file

How many years of hands-on experience do you have working with Splunk?*

Which of the following Splunk activities have you performed? (Select all that apply)* Configured Splunk forwardersOnboarded log sources into SplunkBuilt Splunk dashboards and reportsCreated Splunk searches or queriesDeveloped alerts or correlation searchesAdministered Splunk infrastructure (indexers/search heads)None of the above

Have you worked in a Security Operations Center (SOC) or security monitoring environment?* Yes – SOC analyst or engineerYes – security monitoring in an IT environmentNo

What is your salary requirement?*

Briefly describe one Splunk dashboard, alert, or log ingestion pipeline you helped create or maintain.*

This position requires a federal background investigation that includes a review of financial responsibility. Are you able to meet this requirement?* yesno

The following questions are entirely optional.

Invitation for Job Applicants to Self-Identify as a U.S. Veteran

A “disabled veteran” is one of the following:
- a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or
- a person who was discharged or released from active duty because of a service-connected disability.
A “recently separated veteran” means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.
An “active duty wartime or campaign badge veteran” means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
An “Armed forces service medal veteran” means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Veteran status

I IDENTIFY AS ONE OR MORE OF THE CLASSIFICATIONS OF PROTECTED VETERAN LISTED ABOVE
I AM NOT A PROTECTED VETERAN
I DON’T WISH TO ANSWER

Voluntary Self-Identification of Disability

Voluntary Self-Identification of Disability Form CC-305
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

Alcohol or other substance use disorder (not currently using drugs illegally)
Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
Blind or low vision
Cancer (past or present)
Cardiovascular or heart disease
Celiac disease
Cerebral palsy
Deaf or serious difficulty hearing
Diabetes
Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
Epilepsy or other seizure disorder
Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
Intellectual or developmental disability
Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
Missing limbs or partially missing limbs
Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
Partial or complete paralysis (any cause)
Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
Short stature (dwarfism)
Traumatic brain injury

Please check one of the boxes below:

YES, I HAVE A DISABILITY, OR HAVE HAD ONE IN THE PAST NO, I DO NOT HAVE A DISABILITY AND HAVE NOT HAD ONE IN THE PAST I DO NOT WANT TO ANSWER

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

You must enter your name and date
Name	Date

Human Check*

Submit Application

Tangent Technologies LLC

Thanks for visiting our Career Page. Please review our open positions and apply to the positions that match your qualifications.

Cyber Defense Analyst – Intermediate (Splunk Engineer)

Apply for this position