Information Security Officer

360 IDE; Harrisburg (Dauphin County); On-site; USD 120,000 - 170,000; Full time

Job summary

360 IDE in Harrisburg, PA is seeking an experienced Senior SIEM / Splunk Engineer to lead our security monitoring efforts. The role demands hands-on expertise with Splunk Enterprise and Splunk Enterprise Security, plus extensive experience in SIEM design, log onboarding, and incident detection.

You will implement SPL searches, dashboards, and alerts, onboard diverse log sources, and collaborate with SOC, infrastructure, and cloud teams to strengthen enterprise security.

Qualifications

• 10+ years of professional IT experience in SIEM, security engineering, cybersecurity operations, or security monitoring technologies.
• 8+ years administering Splunk Enterprise and/or Splunk Enterprise Security — Required.
• 5+ years onboarding and integrating security log sources using syslog, APIs, agents, or cloud-native integrations.
• Experience with large enterprise or government environments — Highly Desired.

Responsibilities

• Engineer, configure, and optimize the enterprise SIEM platform (Splunk).
• Administer and engineer Splunk Enterprise and/or Splunk Enterprise Security, including platform configuration and operational support.
• Onboard and integrate new security and infrastructure log sources.
• Develop SPL searches, dashboards, alerts, correlation searches, and reports for security monitoring.
• Support SOC analysts and incident response with SPL queries and dashboards.

Skills

Splunk Enterprise

SIEM

SPL searches

Security monitoring

Log onboarding

Cloud integrations

Education

Bachelor's or Master's degree

Tools

Splunk Enterprise Security

Job description

Job Title: Senior SIEM / Splunk Engineer

Location: Harrisburg, PA

Contract: W2/ C2C

We are seeking an experienced SIEM / Splunk Engineer with 10+ years of professional IT experience in SIEM, security engineering, cybersecurity operations, or security monitoring technologies. The ideal candidate will have extensive hands‑on experience engineering and administering Splunk Enterprise and/or Splunk Enterprise Security, along with strong expertise in log onboarding, security monitoring, detection engineering, integrations, troubleshooting, and enterprise SIEM operations.

Key Responsibilities & Requirements

• Engineer, configure, maintain, and optimize the enterprise SIEM platform, including Splunk and related security technologies.
• Administer and engineer Splunk Enterprise and/or Splunk Enterprise Security, including platform configuration, monitoring, optimization, and operational support.
• Onboard and integrate new security and infrastructure log sources using syslog, APIs, agents, and cloud-native integrations.
• Ensure logs are properly collected, parsed, normalized, indexed, and retained according to security and operational requirements.
• Develop and maintain SPL searches, correlation searches, alerts, dashboards, reports, detection rules, and other security monitoring content.
• Integrate SIEM capabilities with security tools, cloud platforms, applications, infrastructure, networking, and other enterprise systems.
• Monitor SIEM platform performance, capacity, availability, data ingestion, and overall health, and troubleshoot complex technical issues.
• Tune alerts and detection logic to reduce false positives and improve the effectiveness and accuracy of security monitoring.
• Support SOC analysts and incident response personnel by providing technical expertise, SPL queries, dashboards, searches, and investigative capabilities.
• Support Splunk upgrades, patches, configuration changes, testing, and implementation of supporting SIEM infrastructure.
• Troubleshoot complex SIEM, logging, data ingestion, parsing, indexing, and integration issues.
• Develop and maintain technical documentation, operational procedures, system configurations, and knowledge-transfer materials.
• Collaborate with SOC, infrastructure, cloud, networking, and application teams on SIEM and security monitoring initiatives.
• Apply cybersecurity best practices and follow Commonwealth security standards, change-management processes, and applicable cybersecurity policies and requirements.
• Apply knowledge of cybersecurity frameworks such as NIST and MITRE ATT&CK to security monitoring and detection activities.

Minimum Qualifications

• 10+ years of professional IT experience supporting SIEM, security engineering, cybersecurity operations, or security monitoring technologies.
• 8+ years of hands‑on experience administering or engineering Splunk Enterprise and/or Splunk Enterprise Security — Required.
• 5+ years of experience onboarding and integrating security log sources using syslog, APIs, agents, or cloud-native integrations.
• Experience developing SPL searches, dashboards, alerts, correlation searches, and reports — Highly Desired.
• Experience troubleshooting complex SIEM, logging, data ingestion, or integration issues — Highly Desired.
• Experience supporting a large enterprise or government environment — Highly Desired.
• Familiarity with cybersecurity frameworks including NIST and MITRE ATT&CK.
• Bachelor's or Master's degree in an appropriate/relevant field of education — Mandatory.