Lead Splunk SIEM Engineer - Hybrid, Crane, IN

RMC - Resource Management Concepts Inc.; Crane (IN); Hybrid; USD 95,000 - 112,000; Full time

Benefits offered by this job

Health insurance

401K plan

Paid federal holidays

Job summary

Resource Management Concepts, Inc. (RMC) in Crane, Indiana, seeks a Splunk SIEM Engineer to lead the evolution of our Splunk environment into an enterprise-grade SIEM platform.

The role covers build-out and ongoing operations, ensuring reliable security insights and alignment with cybersecurity initiatives. Requirements include hands-on Splunk Enterprise and ES, SIEM architecture expertise, data ingestion and CIM mapping, and a DoD 8140 IAT-3 certification with interim DoD Secret clearance.

Qualifications

• Hands-on experience with Splunk Enterprise and Splunk Enterprise Security (ES).
• Strong understanding of SIEM architecture, design, and operations.
• Experience with log ingestion, parsing, normalization, and CIM mapping.
• Proficiency in developing correlation searches, alerts, and dashboards.
• Experience tuning SIEM content to reduce false positives and improve detection accuracy.

Responsibilities

• Lead the transformation of the Splunk environment into a fully functional SIEM platform.
• Manage and optimize the data ingestion pipeline; audit data sources and control licensing costs; onboard new sources.
• Parse, normalize, and map ingested data to the CIM.
• Configure, maintain, and optimize Splunk ES and SOAR.
• Develop and maintain correlation searches, detections, and use cases; create and tune alerts.
• Build dashboards and visualizations for operational awareness and trend analysis.
• Monitor platform health and performance; perform upgrades and capacity planning.

Skills

Splunk

SIEM

CIM mapping

Dashboards

Correlations

Incident response

Tools

Splunk Enterprise

Splunk Enterprise Security

SOAR

Job description

Resource Management Concepts, Inc. (RMC) in Crane, Indiana, seeks a Splunk SIEM Engineer to lead the evolution of our Splunk environment into an enterprise-grade SIEM platform.

The role covers build-out and ongoing operations, ensuring reliable security insights and alignment with cybersecurity initiatives. Requirements include hands-on Splunk Enterprise and ES, SIEM architecture expertise, data ingestion and CIM mapping, and a DoD 8140 IAT-3 certification with interim DoD Secret clearance.