Hybrid SIEM Engineer — Splunk & Threat Detection

Software Technology Inc; Harrisburg (Dauphin County); Hybrid; USD 110,000 - 140,000; Full time

Job summary

Software Technology Inc. seeks an experienced SIEM engineer to support the Commonwealth's SIEM environment. Hybrid work arrangement is available with three onsite days per week at the Harrisburg location.

The contractor will design, configure, and optimize the SIEM platform, focusing on Splunk, data ingestion, detection rules, and incident response support. Responsibilities include onboarding data sources, developing dashboards, tuning alerts, and ensuring log retention and health of the SIEM.

Qualifications

• 3+ years experience in SIEM, security engineering, or security monitoring
• Experience administering Splunk Enterprise and Splunk ES
• Experience onboarding security log sources (syslog, APIs, agents, cloud integrations)
• Familiarity with NIST and MITRE ATT&CK frameworks
• Splunk Enterprise Certified Admin certification highly desired

Responsibilities

• Engineer, configure, maintain, and optimize the enterprise SIEM platform (Splunk and related security tech)
• Onboard new data sources and ensure logs are collected, parsed, and indexed
• Develop correlations, alerts, dashboards, reports, and detection rules
• Integrate SIEM with security tools, cloud platforms, applications, and infrastructure
• Monitor performance, capacity, availability, and health of the SIEM
• Tune alerts to reduce false positives and improve detection
• Support SOC analysts and incident response with queries and dashboards
• Assist with upgrades, patches, and SIEM infrastructure changes
• Document procedures and knowledge bases
• Collaborate with SOC, networks, cloud, and app teams on SIEM initiatives

Job description

Software Technology Inc. seeks an experienced SIEM engineer to support the Commonwealth's SIEM environment. Hybrid work arrangement is available with three onsite days per week at the Harrisburg location.

The contractor will design, configure, and optimize the SIEM platform, focusing on Splunk, data ingestion, detection rules, and incident response support. Responsibilities include onboarding data sources, developing dashboards, tuning alerts, and ensuring log retention and health of the SIEM.