SIEM Engineer

Skywalk Global; Harrisburg (Dauphin County); On-site; USD 90,000 - 130,000; Full time

Job summary

Skywalk Global is seeking an experienced SIEM Engineer to design, configure, and operate the enterprise SIEM environment, with emphasis on Splunk and related security technologies.

You will develop correlation searches, alerts, dashboards, and detection rules while integrating SIEM with security tools, cloud platforms, and applications. Collaboration with SOC, infra, and cloud teams is essential to strengthen monitoring and incident response capabilities.

Qualifications

• Professional IT experience including at least three years supporting SIEM, security engineering, cybersecurity operations, or security.
• Experience administering or engineering Splunk Enterprise and/or Splunk Enterprise Security.
• Demonstrated experience onboarding and integrating security log sources using technologies such as syslog, APIs, agents, or cloud-native integration.

Responsibilities

• Engineer, configure, maintain, and optimize the enterprise SIEM platform, including Splunk and related security technologies.
• Develop and maintain correlation searches, alerts, dashboards, reports, detection rules, and other monitoring content.
• Integrate SIEM capabilities with security tools, cloud platforms, applications, infrastructure, and other enterprise systems.
• Monitor SIEM platform performance, capacity, availability, and overall health and troubleshoot issues.
• Support SOC analysts and incident responders with expertise, queries, dashboards, and investigative capabilities.
• Support upgrades, patches, configuration changes, testing, and implementation of SIEM infrastructure.
• Develop and maintain technical documentation, procedures, configurations, and knowledge-transfer materials.
• Collaborate with SOC, infrastructure, cloud, networking, and application teams on SIEM initiatives.

Skills

SIEM experience

Splunk

Security monitoring

Incident response

Threat detection

Tools

Splunk Enterprise

Splunk Enterprise Security

APIs

Job description

ProvidespecializedengineeringsupportfortheCommonwealth'sSecurityInformationandEventManagement(SIEM)environment.Thecontractorwillsupportthedesign,configuration,integration,optimization,andongoingoperationoftheSIEMplatformtostrengthenenterprisesecuritymonitoring,threatdetection,incidentresponse,andlogmanagementcapabilities.ThispositionreportstotheDirectorandprovideshands-ontechnicalsupportfortheSIEMenvironment.Strategicdirection,governance,andoverallprogramoversightremainwiththeDirectorDuties

Responsibilities

• Engineer,configure,maintain,andoptimizetheenterpriseSIEMplatform,includingSplunkandrelatedsecuritytechnologies.
• Developandmaintaincorrelationsearches,alerts,dashboards,reports,detectionrules,andothersecuritymonitoringcontent.
• IntegrateSIEMcapabilitieswithsecuritytools,cloudplatforms,applications,infrastructure,andotherenterprisesystems.
• MonitorSIEMplatformperformance,capacity,availability,andoverallhealthandtroubleshoottechnicalissues.
• SupportSOCanalystsandincidentresponsepersonnelbyprovidingtechnicalexpertise,queries,dashboards,andinvestigativecapabilities.
• Supportupgrades,patches,configurationchanges,testing,andimplementationofsupportingSIEMinfrastructure.
• Developandmaintaintechnicaldocumentationoperationalprocedures,systemconfigurations,andknowledge-transfermaterials.
• CollaboratewithSOC,infrastructure,cloud,networking,andapplicationteamsonSIEM-relatedinitiatives.

Qualifications

• ProfessionalITexperienceincludingatleastthreeyearssupportingSIEM,securityengineering,cybersecurityoperations,orsecurity
• ExperienceadministeringorengineeringSplunkEnterpriseand/orSplunkEnterpriseSecurity.Required3Years
• Demonstratedexperienceonboardingandintegratingsecuritylogsourcesusingtechnologiessuchassyslog,APIs,agents,orcloud-nativeintegrationRequired3Years
• Certifications:SplunkEnterpriseCertifiedAdminHighlydesired
• FamiliaritywithcybersecurityframeworkssuchasNISTandMITREATT&CK.Highlydesired