> Markdown version of [/jobs/ext/3587259-cyber-analytics-platform-architect](https://www.wearedevelopers.com/jobs/ext/3587259-cyber-analytics-platform-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Analytics Platform Architect

- **Company:** Nat Booz Allen
- **Location:** United States
- **Experience:** Experienced
- **Salary:** $86,900.0 - $198,000.0
- **Contract:** Permanent contract
- **Skills:** Business Analytics Applications, Cloud Computing, Cyber Security, Data Sharing, Python (Programming Language), OpenShift, Logstash, Zero Trust Network Access, Security Information and Event Management, Scripting, Fluentd, Snowflake, SC Clearance, Data Lakes, Kubernetes, Information Technology, Cybercrime, Microsoft Sentinel, Cortex XSOAR Platform, Apache Kafka, Data Management, Stream Processing, Splunk, Data Pipelines, Devsecops, Security Orchestration, Automation & Response, Databricks
- **Published:** October 5, 2026
- **Apply:** https://www.thejobnetwork.com/job/5c5e2d92-7f51-4bc0-b109-fc88f3a5e0b2/cyber-analytics-platform-architect

## About the Role

* 8+ years of experience in defensive cyber operations, cybersecurity engineering, or security platform architecture
\n

 * 3+ years of experience with SIEM platforms, such as Splunk, Elastic Security, Microsoft Sentinel, or Google Chronicle
\n

 * 3+ years of experience working with stream processing and data brokering tools, such as Apache Kafka, Logstash, Fluentd, or Cribl
\n

 * Experience designing security data pipeline architectures, including log collection, normalization, enrichment, and routing
\n

 * Experience with data lake and analytics platforms, such as Databricks, Apace Iceberg, or Snowflake
\n

 * Experience architecting detection engineering pipelines, threat hunting workflows, and automated response capabilities and integrating EDR or NDR solutions using tools, such as CrowdStrike, Corelight, or Trelix
\n

 * Experience deploying platforms across cloud, on-premises, and disconnected environments using container orchestration, such as Kubernetes or Red Hat OpenShift, and applying Zero Trust principles and DoD cybersecurity frameworks
\n

 * Secret clearance
\n

 * HS diploma or GED
\n, * Experience with Mission Partner Environment (MPE), CENTRIXS, or Five Eyes coalition networks
\n

 * Experience with cross-domain solutions, data diodes, or controlled interface architectures
\n

 * Experience with coalition data sharing frameworks, such as ACP-240 or STANAG standards
\n

 * Experience with SOAR platforms, such as Swimlane, XSOAR, or Phantom
\n

 * Experience with DevSecOps CI/CD pipelines in IL5 or IL6 environments
\n

 * Experience with Python or scripting languages for security automation
\n

 * Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or Engineering
\n