Cyber Risk - Splunk & Machine Learning Principal

Kforce has a client that is seeking a Cyber Risk Defense Principal - Splunk & Machine Learning Developer Remote (Anywhere in the U.S.).

Overview:
We are seeking a highly skilled Splunk Developer and Data Scientist to join a growing Cyber Risk Defense team. This role focuses on building advanced machine learning solutions to detect risk, enhance privacy controls, and strengthen enterprise security across complex environments.

If you're passionate about working at the intersection of cybersecurity, data science, and large-scale data platforms, this is an opportunity to make a meaningful impact.

Key Tasks:

* Design and develop custom applications within Splunk to identify and mitigate cybersecurity and privacy risks

* Build and maintain machine learning models for anomaly detection and classification

* Integrate and analyze large, complex data sets from multiple sources using Python-based pipelines

* Develop scalable data processing workflows to support real-time and batch analytics

* Apply advanced ML techniques including feature engineering, model tuning, and retraining

* Monitor model performance, troubleshoot issues, and ensure data quality in production environments

* Collaborate with cross-functional teams to translate business and security needs into technical solutions

* Contribute to continuous improvement of enterprise analytics, automation, and detection capabilities
* 5-10+ years of experience in Splunk development, administration, or engineering

* Hands-on experience working with Splunk Enterprise in large-scale environments

* Strong Python development experience, including building data pipelines and analytics solutions

Experience developing or maintaining machine learning models, including:

* Unsupervised learning (e.g., Isolation Forest, Autoencoders, Local Outlier Factor)

* Supervised learning (e.g., Random Forest, XGBoost, Logistic Regression)

Solid understanding of:

* Feature engineering and data preprocessing

* Model validation and performance tuning

* Working with imbalanced datasets

* Familiarity with model interpretability techniques (e.g., SHAP, LIME, feature importance)

Preferred Qualifications:

* Splunk Enterprise Security Certified Admin or Splunk Core Certified Consultant (active or recent)

* Experience working in cybersecurity, risk, or privacy-focused environments

* Exposure to large-scale enterprise data ecosystems or regulated industries

* Strong problem-solving mindset and ability to work independently in a fast-paced environment

Additional Details:

* Fully remote - open to candidates anywhere in the United States

* No travel required

* Standard business hours (Monday-Friday)

* Opportunity to contribute to high-impact initiatives with potential for long-term engagement

Why This Role Stands Out:

* Work on cutting-edge ML solutions within a leading enterprise security environment

* Direct impact on privacy, compliance, and risk detection strategies

* Opportunity to blend data science, engineering, and cybersecurity expertise