{"id":3626799,"url":"https://alion.io/job/kda-consulting-cyber-it-operations-analytics-engineer","title":"Cyber & IT Operations Analytics Engineer","company":{"id":679205,"name":"KDA Consulting","domain":"kda-consulting.com","url":"https://alion.io/company/kda-consulting","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"B","score":75,"open_postings":7,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Herndon, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Apache Kafka","optional":false},{"name":"Apache NiFi","optional":false},{"name":"AWS","optional":false},{"name":"Bash","optional":false},{"name":"Linux","optional":false},{"name":"Machine Learning","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-02T19:51:31Z","employer_posted_date":"2026-11-02","last_verified_at":"2026-11-04T14:45:17Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"We are seeking a hands-on Cyber & IT Operations Data / Splunk Analytics Engineer to support the Sponsor’s IT systems data modernization ecosystem. In this role, you will address critical data challenges by establishing data quality baselines, schema standards, and normalization pipelines for high-velocity, disparate cyber feeds and IT operations telemetry (system performance metrics, service health, network infrastructure logs, and application events). Working within an Agile engineering environment, you will architect robust ingest pipelines, build optimized Splunk models and correlation searches, and ensure raw telemetry is transformed into standardized, high-confidence data powering both threat analysis and holistic IT operational health monitoring.\nData Quality & Normalization: Standardize, cleanse, and normalize high-velocity machine data from disparate security tools and IT operational systems into common information schemas (e.g., Splunk CIM) to ensure data fidelity, search efficiency, and unified observability.\n Splunk Architecture & Operations: Configure, tune, monitor, and administer distributed Splunk infrastructure (Heavy Forwarders, Universal Forwarders, Indexer Clusters, Search Head Clusters) and ingest streams.\n Analytics & Search Optimization: Develop complex, performance-optimized Search Processing Language (SPL) queries, accelerated data models, event correlations, and real-time alerts supporting cyber threat detection and IT operational reliability/availability.\n Telemetry Pipeline Engineering: Design and support data routing, parsing, filtering, and transformation pipelines for logs, metrics, and traces using Splunk Forwarders, Syslog/HEC, or Apache NiFi.\n Observability & Dashboards: Build operational dashboards and reporting interfaces that translate security events and IT operational health/performance indicators into actionable insights for engineers and leadership.\n Ecosystem Integration: Collaborate with platform and cloud engineers to integrate clean, standardized cyber and IT operational datasets with downstream machine learning and automated analytics tooling.\nRequirements\nSplunk Administrative Expertise: Hands-on experience deploying, architecting, managing, and optimizing distributed enterprise Splunk environments, including index management, forwarder configurations, search optimization, and data model acceleration.\n Cyber & IT Operations Telemetry Standards: Proven experience with log and metric telemetry (syslog, Windows Event Logs, network flows, application logs, infrastructure metrics), field extraction (props.conf / transforms.conf), and enforcing data quality and normalization standards across high-throughput data streams.\n Data Ingestion & Pipelines: Experience ingesting, parsing, and routing streaming data utilizing Splunk native inputs, HTTP Event Collector (HEC), Apache NiFi, or Kafka.\n Scripting & Automation: Ability to write scripts in Python, Bash, or JSON/REST APIs to automate data collection, pipeline health monitoring, and data sanitization tasks.\n Infrastructure & Enclave Environment: Solid working knowledge of Linux system administration, network connectivity troubleshooting, and secure cloud environments (e.g., AWS).\n Education & Experience: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent operational engineering experience).\nMust have an active TS/SCI with Polygraph Clearance.","description_format":"text","description_chars":3452,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-11-02T19:51:31Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":30,"reasons":["conf:1","win:early"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/kda-consulting-cyber-it-operations-analytics-engineer","json_url":"https://alion.io/job/kda-consulting-cyber-it-operations-analytics-engineer.json","meta":{"generated_at":"2026-11-04T17:06:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26209,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":679205},"rest":"https://alion.io/mcp/rest/get_company?id=679205"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkda-consulting-cyber-it-operations-analytics-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkda-consulting-cyber-it-operations-analytics-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkda-consulting-cyber-it-operations-analytics-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kda-consulting-cyber-it-operations-analytics-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkda-consulting-cyber-it-operations-analytics-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3626799}},{"tool":"search_jobs","arguments":{"company":"kda-consulting.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3626799},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}