ZipRecruiter

Log In

1

Splunk Cybersecurity Defense Analyst Jobs (NOW HIRING)

Leidos

Cyber Defense Analyst

Leidos' Cybersecurity Intelligence and Response Team (CSIRT), within the Corporate Information ... As a key part of the team, your responsibilities will include being a Splunk SME and using your ...

Persistent Systems

Cyber Defense Analyst

Clearfield, UT · On-site

$101K - $121K/yr

As a Cyber Defense Analyst, you will be a member of the Security Operations Center (SOC) team ... Bachelor's or higher degree in Cybersecurity, Computer Science, or related technical field

Persistent Systems

Cyber Defense Analyst

Clearfield, UT · On-site

$101K - $121K/yr

As a Cyber Defense Analyst, you will be a member of the Security Operations Center (SOC) team ... Bachelor's or higher degree in Cybersecurity, Computer Science, or related technical field

Persistent Systems

Cyber Defense Analyst

Clearfield, UT · On-site

$101K - $121K/yr

As a Cyber Defense Analyst, you will be a member of the Security Operations Center (SOC) team ... Bachelor's or higher degree in Cybersecurity, Computer Science, or related technical field

Ops Tech Alliance

Cyber Defense Analyst

Monterey, CA · On-site

$105K - $120K/yr

Cyber Defense Analyst Salary Range: $105,000 to $120,000 per year Ops Tech Alliance (OTA) is ... Desired Qualifications • BA/BS in Cybersecurity, Computer Science, or related field. • GCIH ...

next page

Showing results 1-20

People also search for

All JobsSplunk Cybersecurity Defense Analyst Jobs

Splunk Cybersecurity Defense Analyst information

See salary details

$43K

$99.4K

$150K

How much do splunk cybersecurity defense analyst jobs pay per year?

As of Jun 6, 2026, the average yearly pay for splunk cybersecurity defense analyst in the United States is $99,400.00, according to ZipRecruiter salary data. Most workers in this role earn between $79,500.00 and $115,500.00 per year, depending on experience, location, and employer.

How does a Splunk Cybersecurity Defense Analyst typically collaborate with other IT and security teams?

A Splunk Cybersecurity Defense Analyst frequently works alongside network administrators, incident response teams, and other security professionals to detect, investigate, and remediate threats. Collaboration often involves sharing threat intelligence, creating automated alerts, and developing dashboards to provide visibility into security events across the organization. Analysts also participate in regular meetings to coordinate response strategies, review incident post-mortems, and ensure that Splunk configurations align with evolving security requirements. This cross-functional teamwork is essential for maintaining an effective and proactive cybersecurity posture.

What are Splunk Cybersecurity Defense Analysts?

Splunk Cybersecurity Defense Analysts are professionals who use the Splunk platform to monitor, analyze, and defend an organization’s digital infrastructure against cyber threats. They collect and interpret security data, investigate incidents, and create alerts and dashboards to detect suspicious activity in real-time. Their work helps organizations respond quickly to threats, ensuring the safety and integrity of sensitive information and systems. These analysts often collaborate with IT and security teams to develop best practices for threat detection and response.

What are the key skills and qualifications needed to thrive as a Splunk Cybersecurity Defense Analyst, and why are they important?

To thrive as a Splunk Cybersecurity Defense Analyst, you need a solid understanding of cybersecurity principles, threat analysis, and incident response, typically supported by a degree in information security or related certifications like CompTIA Security+ or GIAC. Proficiency with Splunk Enterprise Security, SIEM platforms, and scripting languages such as Python or PowerShell is essential. Strong analytical thinking, problem-solving abilities, and effective communication are important soft skills for collaborating with teams and responding to security incidents. These skills and qualities are critical for quickly identifying, investigating, and mitigating cyber threats to protect organizational assets.

What is the difference between Splunk Cybersecurity Defense Analyst vs Security Operations Center (SOC) Analyst?

AspectSplunk Cybersecurity Defense AnalystSecurity Operations Center (SOC) Analyst
CertificationsSplunk certifications, CompTIA Security+CompTIA Security+, GIAC certifications
Work EnvironmentPrimarily uses Splunk platform for data analysisMonitors security alerts across various tools in a SOC
Industry UsageFinancial, healthcare, tech sectors leveraging SplunkBroadly in all sectors with security teams
Job FocusAnalyzing security data with Splunk, threat detectionMonitoring, incident response, alert management

While both roles focus on cybersecurity, the Splunk Cybersecurity Defense Analyst specializes in using Splunk for data analysis and threat detection, whereas the SOC Analyst performs broader security monitoring and incident response across multiple tools. The roles often overlap but differ in platform focus and scope of responsibilities.

More about Splunk Cybersecurity Defense Analyst jobs
What cities are hiring for Splunk Cybersecurity Defense Analyst jobs? Cities with the most Splunk Cybersecurity Defense Analyst job openings:
What states have the most Splunk Cybersecurity Defense Analyst jobs? States with the most job openings for Splunk Cybersecurity Defense Analyst jobs include:
What job categories do people searching Splunk Cybersecurity Defense Analyst jobs look for? The top searched job categories for Splunk Cybersecurity Defense Analyst jobs are:
Splunk Cybersecurity Defense Analyst jobs near you
Infographic showing various Splunk Cybersecurity Defense Analyst job openings in the United States as of May 2026, with employment types broken down into 93% Full Time, and 7% Contract. Highlights an 100% In-person job distribution, with an average salary of $99,400 per year, or $47.8 per hour.
Cyber Defense Analyst

Cyber Defense Analyst

cFocus Software Incorporated

Washington, DC • On-site

Full-time

This job post has expired today. Applications are no longer accepted.

Job description

Cyber Defense Analyst
Position Title: Cyber Defense Analyst
Program: SBA Enterprise Cybersecurity Services (ECS)Position Summary
The Cyber Defense Analyst supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) Security Operations Center (SOC) by providing cybersecurity monitoring, incident response, threat analysis, and cyber defense operations in support of the agency's 24x7x365 cybersecurity mission.
The Cyber Defense Analyst performs proactive monitoring, analysis, detection, triage, investigation, containment, and reporting of cybersecurity incidents and anomalous events across enterprise, cloud, and hybrid environments. The position works closely with SOC personnel, incident responders, engineers, system administrators, and Government stakeholders to strengthen the agency's security posture and ensure rapid identification and mitigation of cyber threats.Essential Duties and Responsibilities
  • Perform cybersecurity monitoring, incident detection, triage, analysis, and response activities in support of SBA SOC operations.
  • Support 24x7x365 SOC operations in accordance with SBA ECS Task Area 3.5.3 requirements.
  • Monitor security alerts and analyze network, endpoint, system, cloud, and application activity for indicators of compromise.
  • Investigate cybersecurity incidents and suspicious events utilizing SIEM, EDR, IDS/IPS, firewall, and threat intelligence platforms.
  • Support incident response activities in accordance with SBA ECS Task Area 3.5.3.3 and NIST SP 800-61 guidance.
  • Create, update, and manage cybersecurity incident tickets, case files, reports, and escalation documentation.
  • Perform log analysis and event correlation using multiple security monitoring platforms and data sources.
  • Assist with threat hunting activities to identify malicious or anomalous activity across enterprise environments.
  • Analyze phishing attempts, malware activity, unauthorized access attempts, and suspicious user behavior.
  • Support containment, eradication, remediation, and recovery activities during cybersecurity incidents.
  • Document incident findings, response actions, lessons learned, and operational recommendations.
  • Escalate incidents to senior analysts, incident responders, or Government leadership based on severity and impact.
  • Support vulnerability management coordination and remediation tracking activities.
  • Monitor external cybersecurity threat intelligence feeds, CISA advisories, and vulnerability notifications.
  • Assist with forensic evidence collection and preservation activities as directed.
  • Provide operational support for cloud environments including Microsoft Azure, AWS, Microsoft 365, and SaaS platforms.
  • Participate in SOC shift turnover briefings, operational reporting, and incident coordination meetings.
  • Support cybersecurity exercises, continuity of operations (COOP) activities, and readiness initiatives.
  • Maintain compliance with federal cybersecurity standards, policies, procedures, and reporting requirements.
  • Collaborate with internal and external stakeholders to support incident response and operational security objectives.
Minimum Qualifications
  • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, or related technical discipline. Relevant experience may substitute for education requirements.
  • Minimum of 5 years of cybersecurity operations, SOC analysis, cyber defense, or incident response experience.
  • Experience supporting enterprise SOC operations, cybersecurity monitoring, and incident response activities.
  • Experience with SIEM, EDR, IDS/IPS, vulnerability management, and network security monitoring tools.
  • Knowledge of incident response methodologies, threat analysis, and cybersecurity operations concepts.
  • Experience analyzing logs, alerts, indicators of compromise, and security event data.
  • Understanding of federal cybersecurity frameworks including NIST SP 800-53 and NIST SP 800-61.
  • Experience supporting cloud security operations in AWS, Azure, Microsoft 365, or hybrid environments.
  • Strong analytical, technical, communication, and documentation skills.
  • Ability to work effectively in fast-paced operational environments supporting rotating SOC shifts.
Preferred Certifications
  • CompTIA Security+
  • CompTIA CySA+
  • GIAC Certified Incident Handler (GCIH)
  • Certified Ethical Hacker (CEH)
  • GIAC Certified Intrusion Analyst (GCIA)
  • Splunk Core Certified User or SIEM-related certification
  • AWS Certified Security - Specialty
  • Microsoft Azure Security Engineer Associate

Apply