Hybrid Splunk SIEM Engineer – Security Monitoring

V Group Inc.; Harrisburg (Dauphin County); Hybrid; USD 96,000 - 152,000; Full time

Job summary

The Pennsylvania Office of Administration (OA) seeks a Splunk SIEM Engineer to design, configure, and optimize the enterprise SIEM environment. You will onboard data sources, develop correlation searches, alerts, dashboards, and reports to strengthen security monitoring, incident response, and log management across the Commonwealth.

You will support SOC analysts and collaborate with infrastructure, cloud, and networking teams while adhering to Commonwealth security standards and

Qualifications

• Experience administering Splunk Enterprise and/or Splunk Enterprise Security (3+ years).
• Experience onboarding security log sources using syslog, APIs, agents, or cloud-native integration.
• Certification: Splunk Enterprise Certified Admin
• Experience in large enterprise or government environment.
• Experience developing SPL searches, dashboards, alerts, correlation searches, and reports.
• Experience troubleshooting complex SIEM, logging, data ingestion, or integration issues.
• Familiarity with NIST and MITRE ATT&CK frameworks.

Responsibilities

• Engineer, configure, and optimize the enterprise SIEM platform (Splunk).
• Onboard data sources and ensure logs are collected, parsed, indexed, and retained.
• Develop correlation searches, alerts, dashboards, and reports for security monitoring.
• Integrate SIEM with security tools, cloud platforms, and enterprise systems.
• Monitor SIEM performance, capacity, availability, and health; troubleshoot issues.

Skills

Splunk SPL searches

Dashboards development

Incident response support

Security monitoring

Tools

Splunk Enterprise

Splunk Enterprise Security

Syslog integration

APIs integration

Cloud integration

Job description

The Pennsylvania Office of Administration (OA) seeks a Splunk SIEM Engineer to design, configure, and optimize the enterprise SIEM environment. You will onboard data sources, develop correlation searches, alerts, dashboards, and reports to strengthen security monitoring, incident response, and log management across the Commonwealth.

You will support SOC analysts and collaborate with infrastructure, cloud, and networking teams while adhering to Commonwealth security standards and