Hybrid SIEM Engineer - Splunk & Threat Detection

S R International Inc; Harrisburg (Dauphin County); Hybrid; USD 90,000 - 150,000; Full time

Benefits offered by this job

Flexible work from home options

Job summary

The Commonwealth of Pennsylvania is seeking a SIEM Engineer to provide specialized engineering support for its enterprise SIEM environment. The role focuses on designing, configuring, integrating, optimizing, and maintaining SIEM capabilities to strengthen security monitoring, threat detection, incident response, and log management.

This hybrid onsite role is based in Harrisburg, PA (5th Floor, Keystone Building) with onsite work three days per week.

Qualifications

• 3+ years of professional IT experience in SIEM, security engineering, cybersecurity operations, or security monitoring.
• 3+ years of experience administering or engineering Splunk Enterprise and/or Splunk Enterprise Security.
• 3+ years of onboarding and integrating security log sources using syslog, APIs, agents, or cloud-native integrations.
• Experience developing SPL searches, dashboards, alerts, correlation searches, and reports.
• Strong troubleshooting skills across SIEM platforms, log ingestion, and integrations.
• Knowledge of cybersecurity frameworks such as NIST and MITRE ATT&CK.

Responsibilities

• Engineer, configure, maintain, and optimize the enterprise SIEM platform, including Splunk.
• Onboard data sources and ensure logs are collected, parsed, normalized, indexed, and retained.
• Develop and maintain correlation searches, alerts, dashboards, reports, and detection rules.
• Integrate SIEM capabilities with security tools, cloud platforms, applications, and infrastructure.
• Monitor platform performance, capacity, availability, and overall health.
• Tune alerts and detection logic to improve monitoring effectiveness and reduce false positives.
• Support SOC analysts and incident response teams with queries, dashboards, and investigative capabilities.
• Support SIEM upgrades, patches, configuration changes, testing, and implementation.
• Maintain technical documentation, operational procedures, and knowledge-transfer materials.
• Collaborate with SOC, infrastructure, cloud, networking, and application teams; follow Commonwealth security standards.

Skills

SIEM engineering

Cybersecurity operations

Incident response

Threat detection

NIST framework

MITRE ATT&CK

Tools

Splunk Enterprise

Splunk Enterprise Security

Syslog

APIs

Cloud-native integrations

Job description

The Commonwealth of Pennsylvania is seeking a SIEM Engineer to provide specialized engineering support for its enterprise SIEM environment. The role focuses on designing, configuring, integrating, optimizing, and maintaining SIEM capabilities to strengthen security monitoring, threat detection, incident response, and log management.

This hybrid onsite role is based in Harrisburg, PA (5th Floor, Keystone Building) with onsite work three days per week.