Splunk Engineer / SIEM Engineer

We are seeking an experienced SIEM Security Engineer to support the design, configuration, integration, and ongoing optimization of our enterprise SIEM environment. You will work closely with security and IT teams to strengthen enterprise security monitoring, log management, and threat detection capabilities.

Location: Harrisburg, PA 17120

Work Arrangement: Hybrid (3 days/week onsite)

Interview Process: In-person

Key Responsibilities

• SIEM Administration: Engineer, configure, tune, and optimize the enterprise SIEM platform (Splunk Enterprise / Enterprise Security).
• Data Onboarding: Onboard, parse, normalize, and index security log sources using syslog, APIs, agents, and cloud integrations.
• Content Creation: Build and manage correlation searches, SPL queries, alerts, dashboards, and threat detection rules.
• Incident Support: Collaborate with SOC analysts to resolve complex data ingestion issues and streamline threat investigation capabilities.

Key Required & Desired Skills

Must-Have:

• 3+ years of professional IT experience in SIEM, Security Engineering, or Cybersecurity Operations.
• 3+ years administering or engineering Splunk Enterprise or Splunk Enterprise Security.
• 3+ years onboarding and integrating security log sources via Syslog, APIs, or Agents.

Preferred Qualifications:

• Splunk Enterprise Certified Admin certification.
• Expertise in developing SPL searches, correlation rules, dashboards, and reports.
• Hands-on experience troubleshooting data ingestion, logging, or integration issues.
• Familiarity with cybersecurity frameworks such as NIST and MITRE ATT&CK.
• Prior experience in large enterprise or public sector environments.