Splunk Cyber Security Analyst 1, 2, Senior

Requisition ID: 19884

 

Join us in building a better future for Arizona!

SRP is one of the largest public power and water utilities in the U.S. providing electricity to approximately one million customers in the greater metropolitan Phoenix area. Since its founding in 1903, SRP has fostered a culture of stewardship and customer service consistently ranking as an industry leader in customer service according to J.D. Power and named one of Arizona's best employers by Forbes. SRP continues to adapt to its changing business environment by seeking innovative ways to reimagine utility service and the provision of critical resources essential to the life and economy of Arizona.

 

Why Work at SRP

At SRP, we foster an inclusive work environment and believe everyone should have a fair chance to work, regardless of who they are. That’s why we value teams with diverse perspectives, experiences, and backgrounds to help SRP deliver on its mission of providing reliable, affordable and sustainable water and power.

 

SRP's success is rooted in our employees' happiness, health, and safety. That's why we offer a comprehensive benefits package to meet the needs of our employees and enhance their well-being. In addition to competitive pay and performance incentives, eligible employees can take advantage of the following benefits:

 

• Pension Plan (at no cost to the employee)
• 401(k) plan with employer matching
• Available your first day: Medical, vision, dental, and life insurance
• Over 200+ hours of PTO (includes vacation days, holidays, floating holidays, and sick leave)
• Parental leave (up to 4 weeks) and adoption assistance
• Wellness programs (including access to a recreation and fitness facility)
• Short and long-term disability plans
• Tuition assistance for both undergraduate and graduate programs
• 10 Employee Resource Groups for career development, community service, and networking

 

Summary

The OT Splunk Administrator manages and optimizes SRP's Splunk platform to support Operational Technology (OT) environments. The role enhances OT visibility, ensures dependable logging for security and compliance, and empowers operational teams with accurate, trustworthy data.
As the primary owner of the OT Splunk environment, this position leads platform reliability, data ingestion quality, and content development, partnering closely with enterprise and OT cyber security and compliance teams.

What You'll Do

•    Lead the administration, maintenance, and technical direction of the OT Splunk platform, ensuring availability, performance, and resilience.
•    Modernize OT logging strategy by improving data quality, optimizing ingestion pathways, and strengthening internal controls.
•    Onboard and validate OT data sources supporting operational visibility, security detection, and regulatory expectations.
•    Build and maintain dashboards, alerts, and searches supporting OT monitoring and compliance frameworks.
•    Serve as the subject matter expert for log health, pipeline performance, ingestion reliability, and troubleshooting.
•    Partner with OT security analysts and compliance functions to provide evidence, extracts, and defensible log information as needed.
•    Support incident analysis by assisting with queries, timelines, and data availability.
•    Participate in general team operational responsibilities, including systems administrations, firewall administration (such as lifecycle tasks and communication troubleshooting) and administration of critical authentication services.
•    Maintain documentation, architectural diagrams, and runbooks in a way that supports repeatability and audit readiness.
•    Mentor analysts, share knowledge across the team, and help uplift OT logging and monitoring capabilities.
•    Collaborate with cross-functional partners to enhance visibility, strengthen governance, and support continuous improvement.
•    Travel to SRP facilities as needed to support OT stakeholders and operational activities.

Education

A bachelor's degree relevant to the assignment from an accredited institution is preferred.

Experience

This position may be filled at one of three levels outlined below, based on the candidate’s relevant education, experience, or a combination of both that demonstrates the required knowledge,