Hybrid SIEM Engineer - Splunk & Threat Detection

eBusiness Solutions Inc.; Harrisburg (Dauphin County); Hybrid; USD 120,000 - 170,000; Full time

Job summary

eBusiness Solutions Inc. seeks a hands-on Security Engineer with strong Splunk SIEM expertise to manage enterprise security monitoring, support SOC operations, and improve threat detection for a government domain.

The role emphasizes design, integration, and ongoing administration of the SIEM environment. The ideal candidate will onboard data sources, develop correlation rules and dashboards, and collaborate with SOC, infrastructure, cloud, networking, and application teams, while adhering to

Qualifications

• Engineering and administration of enterprise SIEM environments.
• Experience with Splunk Enterprise or Splunk ES for threat detection.
• Onboarding data sources, log parsing, and data normalization.
• Developing correlation rules, alerts, dashboards, and reports.

Responsibilities

• Design, configure, and optimize the enterprise SIEM platform.
• Onboard data sources, ensure logs are collected, parsed, indexed and retained.
• Develop correlation searches, alerts, and dashboards for monitoring.
• Integrate SIEM with security tools, cloud, apps and infrastructure.
• Monitor performance, capacity, and health; troubleshoot issues.
• Tune alerts to reduce false positives and improve detections.
• Support SOC analysts with technical content and investigations.
• Assist with upgrades, patches, and changes to SIEM infrastructure.
• Create and maintain technical documentation and runbooks.
• Collaborate with SOC, infra, cloud, network, and app teams.

Skills

SIEM Engineering

Splunk Enterprise

Log Management

Threat Detection

Correlation Searches

Dashboard Development

Security Tool Integration

Cloud Security Monitoring

Network Security

Troubleshooting

Technical Documentation

Governance & Compliance

Tools

Splunk

Job description

eBusiness Solutions Inc. seeks a hands-on Security Engineer with strong Splunk SIEM expertise to manage enterprise security monitoring, support SOC operations, and improve threat detection for a government domain.

The role emphasizes design, integration, and ongoing administration of the SIEM environment. The ideal candidate will onboard data sources, develop correlation rules and dashboards, and collaborate with SOC, infrastructure, cloud, networking, and application teams, while adhering to