SIEM Engineer

VIVA USA Inc; Harrisburg (Dauphin County); Híbrido; USD 90 000 - 130 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid onsite 3 days/week

Equal opportunity employer

Resumo da oferta

VIVA USA Inc. is seeking a SIEM Engineer to provide specialized security information and event management support. The role involves configuring, integrating, and optimizing the SIEM platform (Splunk) across the enterprise to strengthen threat detection, incident response, and log management.

You will onboard data sources, develop detection content, and collaborate with SOC and IT teams. The position reports to the Director and requires hands-on technical expertise, with hybrid onsite work at 3

Qualificações

• 3+ years of professional SIEM experience.
• Experience administering Splunk Enterprise and/or Splunk Enterprise Security.
• Experience onboarding and integrating security log sources using syslog, APIs, agents, or cloud-native integration.
• Splunk Enterprise Certified Admin is highly desired.

Responsabilidades

• Engineer, configure, maintain, and optimize the enterprise SIEM platform, including Splunk and related security technologies.
• Onboard new data sources and ensure logs are properly collected, parsed, normalized, indexed, and retained.
• Develop and maintain correlation searches, alerts, dashboards, reports, and detection rules.
• Integrate SIEM capabilities with security tools, cloud platforms, applications, infrastructure, and other enterprise systems.
• Monitor SIEM platform performance, capacity, availability, and overall health and troubleshoot technical issues.
• Tune alerts and detection logic to reduce false positives and improve monitoring effectiveness.
• Support SOC analysts and incident response personnel with technical expertise and dashboards.
• Assist upgrades, patches, configuration changes, testing, and deployment of SIEM infrastructure.
• Develop and maintain technical documentation and knowledge-transfer materials.
• Collaborate with SOC, infrastructure, cloud, networking, and application teams on SIEM initiatives.
• Follow client security standards and change-management processes.

Conhecimentos

SIEM experience

Security operations

Threat detection

Incident response

Ferramentas

Splunk Enterprise

Splunk Enterprise Security

Descrição da oferta de emprego

Hybrid onsite 3 days/week

Provide specialized engineering support for the client's Security Information and Event Management (SIEM) environment. The contractor will support the design, configuration, integration, optimization, and ongoing operation of the SIEM platform to strengthen enterprise security monitoring, threat detection, incident response, and log management capabilities. This position reports to the Director and provides hands-on technical support for the SIEM environment. Strategic direction, governance, and overall program oversight remain with the Director

Duties

• Engineer, configure, maintain, and optimize the enterprise SIEM platform, including Splunk and related security technologies.


• Onboard new data sources and ensure logs are properly collected, parsed, normalized, indexed, and retained.


• Develop and maintain correlation searches, alerts, dashboards, reports, detection rules, and other security monitoring content.


• Integrate SIEM capabilities with security tools, cloud platforms, applications, infrastructure, and other enterprise systems.


• Monitor SIEM platform performance, capacity, availability, and overall health and troubleshoot technical issues.


• Tune alerts and detection logic to reduce false positives and improve the effectiveness of security monitoring.


• Support SOC analysts and incident response personnel by providing technical expertise, queries, dashboards, and investigative capabilities.


• Support upgrades, patches, configuration changes, testing, and implementation of supporting SIEM infrastructure.


• Develop and maintain technical documentation operational procedures, system configurations, and knowledge-transfer materials.


• Collaborate with SOC, infrastructure, cloud, networking, and application teams on SIEM-related initiatives.


• Follow the client security standards, change-management processes, and applicable cybersecurity policies and requirements.

Skill - Required / Desired - Amount of Experience

• Professional IT experience including at least three years supporting SIEM, security engineering, cybersecurity operations, or security monitoring tech - Required - 3 Years


• Experience administering or engineering Splunk Enterprise and/or Splunk Enterprise Security. - Required - 3 Years


• Demonstrated experience onboarding and integrating security log sources using technologies such as syslog, APIs, agents, or cloud-native integration - Required - 3 Years


• Certifications: Splunk Enterprise Certified Admin - Highly desired


• Experience supporting a large enterprise or government environment. - Highly desired


• Experience developing SPL searches, dashboards, alerts, correlation searches, and reports. - Highly desired


• Experience troubleshooting complex SIEM, logging, data ingestion, or integration issues. - Highly desired


• Familiarity with cybersecurity frameworks such as NIST and MITRE ATT&CK. - Highly desired

Notes

Hybrid onsite 3 days/week

VIVA is an equal opportunity employer. All qualified applicants have an equal opportunity for placement, and all employees have an equal opportunity to develop on the job. This means that VIVA will not discriminate against any employee or qualified applicant on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status