SEIM Engineer

S R International Inc; Harrisburg (Dauphin County); Hybrid; USD 90,000 - 150,000; Full time

Benefits offered by this job

Flexible work from home options

Job summary

The Commonwealth of Pennsylvania is seeking a SIEM Engineer to provide specialized engineering support for its enterprise SIEM environment. The role focuses on designing, configuring, integrating, optimizing, and maintaining SIEM capabilities to strengthen security monitoring, threat detection, incident response, and log management.

This hybrid onsite role is based in Harrisburg, PA (5th Floor, Keystone Building) with onsite work three days per week.

Qualifications

• 3+ years of professional IT experience in SIEM, security engineering, cybersecurity operations, or security monitoring.
• 3+ years of experience administering or engineering Splunk Enterprise and/or Splunk Enterprise Security.
• 3+ years of onboarding and integrating security log sources using syslog, APIs, agents, or cloud-native integrations.
• Experience developing SPL searches, dashboards, alerts, correlation searches, and reports.
• Strong troubleshooting skills across SIEM platforms, log ingestion, and integrations.
• Knowledge of cybersecurity frameworks such as NIST and MITRE ATT&CK.

Responsibilities

• Engineer, configure, maintain, and optimize the enterprise SIEM platform, including Splunk.
• Onboard data sources and ensure logs are collected, parsed, normalized, indexed, and retained.
• Develop and maintain correlation searches, alerts, dashboards, reports, and detection rules.
• Integrate SIEM capabilities with security tools, cloud platforms, applications, and infrastructure.
• Monitor platform performance, capacity, availability, and overall health.
• Tune alerts and detection logic to improve monitoring effectiveness and reduce false positives.
• Support SOC analysts and incident response teams with queries, dashboards, and investigative capabilities.
• Support SIEM upgrades, patches, configuration changes, testing, and implementation.
• Maintain technical documentation, operational procedures, and knowledge-transfer materials.
• Collaborate with SOC, infrastructure, cloud, networking, and application teams; follow Commonwealth security standards.

Skills

SIEM engineering

Cybersecurity operations

Incident response

Threat detection

NIST framework

MITRE ATT&CK

Tools

Splunk Enterprise

Splunk Enterprise Security

Syslog

APIs

Cloud-native integrations

Job description

Job Title: Security Information and Event Management (SIEM) Engineer

Job Code: PA 813707

Client: Commonwealth of Pennsylvania – OA/EISO

Location: Harrisburg, PA – Hybrid

Work Location: 5th Floor, Keystone Building, Harrisburg, PA 17120

Work Schedule: Onsite 3 days per week

Duration: Long-term Contract

Interview: In-person

Closing Date: 10/15/2026 at 4:00 PM

Position Overview

The Commonwealth of Pennsylvania is seeking a SIEM Engineer to provide specialized engineering support for its enterprise Security Information and Event Management (SIEM) environment. The role focuses on designing, configuring, integrating, optimizing, and maintaining SIEM capabilities to strengthen security monitoring, threat detection, incident response, and log management.

Required Skills

• 3+ years of professional IT experience in SIEM, security engineering, cybersecurity operations, or security monitoring.
• 3+ years of experience administering or engineering Splunk Enterprise and/or Splunk Enterprise Security.
• 3+ years of experience onboarding and integrating security log sources using syslog, APIs, agents, or cloud-native integrations.
• Experience developing SPL searches, dashboards, alerts, correlation searches, and reports.
• Strong troubleshooting skills across SIEM platforms, log ingestion, and integrations.
• Knowledge of cybersecurity frameworks such as NIST and MITRE ATT&CK.

Preferred Qualifications

• Splunk Enterprise Certified Admin certification.
• Experience supporting large enterprise or government environments.
• Experience optimizing SIEM detection rules and reducing false positives.

Key Responsibilities

• Engineer, configure, maintain, and optimize the enterprise SIEM platform, including Splunk.
• Onboard data sources and ensure logs are properly collected, parsed, normalized, indexed, and retained.
• Develop and maintain correlation searches, alerts, dashboards, reports, and detection rules.
• Integrate SIEM capabilities with security tools, cloud platforms, applications, and infrastructure.
• Monitor platform performance, capacity, availability, and overall health.
• Tune alerts and detection logic to improve monitoring effectiveness and reduce false positives.
• Support SOC analysts and incident response teams with queries, dashboards, and investigative capabilities.
• Support SIEM upgrades, patches, configuration changes, testing, and implementation.
• Maintain technical documentation, operational procedures, and knowledge-transfer materials.
• Collaborate with SOC, infrastructure, cloud, networking, and application teams.Follow Commonwealth security standards, change-management processes, and cybersecurity policies.

SIEM, Splunk Enterprise, Splunk Enterprise Security, SPL, Security Engineering, Cybersecurity Operations, Log Management, Syslog, APIs, Cloud-Native Integrations, Threat Detection, Incident Response, Security Monitoring, NIST, MITRE ATT&CK

Flexible work from home options available.