Senior SIEM Detection Engineer — Splunk Expert

Mantis Security Corporation; Reston (VA); On-site; USD 110,000 - 170,000; Full time

Job summary

Mantis Security Corporation is seeking a seasoned SIEM Engineer to enhance threat detection capabilities and SOC operations. You will develop and tune Splunk detections, collaborate with SOC analysts, and implement improved logging and alerting across multiple data sources.

The ideal candidate has extensive SIEM experience, strong Splunk skills, and a proven ability to translate attacker techniques into actionable detections within a security operations center environment.

Qualifications

• 10+ years of cybersecurity experience with SIEM or security monitoring.
• Strong Splunk experience including SPL searches, correlation searches, dashboards, and alert development.
• Experience developing and tuning security detections in a SOC environment.
• Understanding of security logging across Windows, Linux, network, endpoint, identity, and cloud environments.
• Experience onboarding and troubleshooting security data sources within a SIEM.
• Strong understanding of common attack techniques and how to translate them into detection logic.
• Familiarity with MITRE ATT&CK, incident response, and threat hunting.
• Relevant cybersecurity or SIEM certification such as Security+, CySA+, GIAC, or Splunk certification.

Responsibilities

• Develop, tune, and maintain Splunk searches, alerts, correlation rules, and dashboards.
• Build and improve detection logic to identify suspicious and malicious activity while reducing false positives.
• Support the onboarding, parsing, normalization, and validation of security log sources.
• Identify gaps in logging, telemetry, and detection coverage and help implement improvements.
• Translate emerging threats and attacker techniques into actionable detections using MITRE ATT&CK.
• Support SOC investigations and threat hunting by developing queries and correlating activity across multiple data sources.
• Troubleshoot SIEM data ingestion, search, alerting, and performance issues.
• Document detection logic, configurations, processes, and recommended improvements.

Skills

10+ yrs exp

Splunk expert

SOC detections

Security logging

SIEM onboarding

Threat detection

MITRE ATT&CK

Security certifications

Tools

Splunk

Python

PowerShell

Job description

Mantis Security Corporation is seeking a seasoned SIEM Engineer to enhance threat detection capabilities and SOC operations. You will develop and tune Splunk detections, collaborate with SOC analysts, and implement improved logging and alerting across multiple data sources.

The ideal candidate has extensive SIEM experience, strong Splunk skills, and a proven ability to translate attacker techniques into actionable detections within a security operations center environment.