Securtiy Engineer

eBusiness Solutions Inc.; Harrisburg (Dauphin County); Hybrid; USD 120,000 - 170,000; Full time

Job summary

eBusiness Solutions Inc. seeks a hands-on Security Engineer with strong Splunk SIEM expertise to manage enterprise security monitoring, support SOC operations, and improve threat detection for a government domain.

The role emphasizes design, integration, and ongoing administration of the SIEM environment. The ideal candidate will onboard data sources, develop correlation rules and dashboards, and collaborate with SOC, infrastructure, cloud, networking, and application teams, while adhering to

Qualifications

• Engineering and administration of enterprise SIEM environments.
• Experience with Splunk Enterprise or Splunk ES for threat detection.
• Onboarding data sources, log parsing, and data normalization.
• Developing correlation rules, alerts, dashboards, and reports.

Responsibilities

• Design, configure, and optimize the enterprise SIEM platform.
• Onboard data sources, ensure logs are collected, parsed, indexed and retained.
• Develop correlation searches, alerts, and dashboards for monitoring.
• Integrate SIEM with security tools, cloud, apps and infrastructure.
• Monitor performance, capacity, and health; troubleshoot issues.
• Tune alerts to reduce false positives and improve detections.
• Support SOC analysts with technical content and investigations.
• Assist with upgrades, patches, and changes to SIEM infrastructure.
• Create and maintain technical documentation and runbooks.
• Collaborate with SOC, infra, cloud, network, and app teams.

Skills

SIEM Engineering

Splunk Enterprise

Log Management

Threat Detection

Correlation Searches

Dashboard Development

Security Tool Integration

Cloud Security Monitoring

Network Security

Troubleshooting

Technical Documentation

Governance & Compliance

Tools

Splunk

Job description

One of our client int the governemnt domain is seeking a Security Engineer with strong expertise in SIEM technologies, particularly Splunk, who can manage enterprise-scale security monitoring solutions, support SOC operations, improve threat detection capabilities, and ensure the reliability and effectiveness of the Commonwealth's security monitoring environment.

Security Engineer (SIEM)
Work Location: Hybrid - Onsite 3 days per week at 5th Floor Keystone Building, Harrisburg, PA 17120
Interview Type: In-Person

Provide specialized engineering support for the Commonwealth's Security Information and Event Management (SIEM) environment. The Security Engineer will be responsible for the design, configuration, integration, optimization, and ongoing administration of the enterprise SIEM platform, including Splunk, to enhance security monitoring, threat detection, incident response, and log management capabilities. This position reports to the Director and provides hands‑on technical support for the SIEM environment. Strategic direction, governance, and overall program oversight remain with the Director.

Key Responsibilities

• Engineer, configure, maintain, and optimize the enterprise SIEM platform, including Splunk and related security technologies.
• Onboard new data sources and ensure logs are properly collected, parsed, normalized, indexed, and retained.
• Develop and maintain correlation searches, alerts, dashboards, reports, detection rules, and other security monitoring content.
• Integrate SIEM capabilities with security tools, cloud platforms, applications, infrastructure, and other enterprise systems.
• Monitor SIEM platform performance, capacity, availability, and overall health; troubleshoot and resolve technical issues.
• Tune alerts and detection logic to reduce false positives and improve the effectiveness of security monitoring.
• Support SOC analysts and incident response teams by providing technical expertise, investigative queries, dashboards, and reporting capabilities.
• Support upgrades, patches, configuration changes, testing, and implementation of supporting SIEM infrastructure.
• Develop and maintain technical documentation, operational procedures, system configurations, and knowledge transfer materials.
• Collaborate with SOC, infrastructure, cloud, networking, and application teams on SIEM-related initiatives.
• Follow Commonwealth security standards, change-management processes, and applicable cybersecurity policies and requirements.

Required Skills

• SIEM Engineering and Administration
• Splunk Enterprise / Splunk Enterprise Security (ES)
• Log Management and Data Onboarding
• Security Monitoring and Threat Detection
• Correlation Search and Alert DevelopmentSecurity Operations Center (SOC) Support
• Dashboard and Report Development
• Security Tool Integration
• Cloud Security Monitoring
• Infrastructure and Network Security
• Performance Tuning and Troubleshooting
• Technical Documentation
• Cybersecurity Compliance and Governance

Preferred Qualifications

• Strong proficiency with Splunk architecture, administration, and use‑case development.
• Experience integrating cloud, network, endpoint, and security technologies into SIEM platforms.
• Knowledge of cybersecurity frameworks, incident response processes, and threat detection methodologies.
• Ability to collaborate effectively with cross‑functional technical and security teams.

Ideal Candidate

A hands‑on Security Engineer with strong expertise in SIEM technologies, particularly Splunk, who can manage enterprise‑scale security monitoring solutions, support SOC operations, improve threat detection capabilities, and ensure the reliability and effectiveness of the Commonwealth's security monitoring environment.