Hybrid SIEM Engineer (Splunk) – Threat Detection

Morph Enterprise; Harrisburg (Dauphin County); Híbrido; USD 110 000 - 150 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work model

Onsite in Harrisburg

Resumo da oferta

Morph Enterprise is seeking an experienced SIEM Engineer / Splunk Engineer to support an enterprise SIEM environment. You will configure, integrate, and optimize Splunk to enhance security monitoring, threat detection, and incident response.

The role involves onboarding data sources, developing detection content, and close collaboration with SOC, infrastructure, cloud, and applications teams to keep logging healthy and actionable.

Qualificações

• Hands-on Splunk/SIEM experience in enterprise environments.
• Strong knowledge of security log collection, parsing, normalization, indexing and retention.
• Experience creating detection content, alerts, dashboards and correlation rules.

Responsabilidades

• Engineer and optimize the enterprise SIEM platform (Splunk) and related security tools.
• Onboard data sources; ensure logs are collected, parsed and indexed correctly.
• Develop correlation searches, alerts, dashboards and reports for threat detection.
• Collaborate with SOC, infrastructure, cloud, networking and apps teams.
• Support platform upgrades, changes, and technical documentation.

Conhecimentos

Splunk

SIEM

Threat detection

Log management

Dashboards

Ferramentas

SPL

Descrição da oferta de emprego

Morph Enterprise is seeking an experienced SIEM Engineer / Splunk Engineer to support an enterprise SIEM environment. You will configure, integrate, and optimize Splunk to enhance security monitoring, threat detection, and incident response.

The role involves onboarding data sources, developing detection content, and close collaboration with SOC, infrastructure, cloud, and applications teams to keep logging healthy and actionable.