SIEM Engineer

Inabia Software & Consulting Inc.; Harrisburg (Dauphin County); On-site; USD 100,000 - 150,000; Full time

Job summary

Inabia Software & Consulting Inc. seeks an experienced SIEM Engineer to design, configure, optimize, and maintain its enterprise SIEM environment. The role focuses on strengthening security monitoring, threat detection, incident response, and log management across data sources and platforms.

You will onboard data sources, develop correlation searches, alerts, dashboards, and reports, and integrate SIEM with cloud and on-premises systems while supporting SOC analysts and incident response teams.

Qualifications

• Hands-on SIEM engineering experience with enterprise platforms.
• Experience with Splunk and log data workflows.
• Ability to develop detection content and monitoring dashboards.

Responsibilities

• Engineer, configure, maintain, and optimize the enterprise SIEM platform (Splunk).
• Onboard new data sources and ensure proper log collection, parsing, normalization, indexing, and retention.
• Develop and maintain correlation searches, alerts, dashboards, reports, and detection rules.
• Integrate SIEM with cloud, apps, infrastructure and security tools.
• Monitor performance, troubleshoot issues, tune alerts to reduce false positives.
• Provide SOC analytical support, including queries and investigative capabilities.
• Support upgrades, patches, configuration changes, testing, and deployment.
• Maintain documentation and knowledge-transfer materials.
• Collaborate with SOC, infra, cloud, networking, and app teams; adhere to security standards.

Skills

SIEM engineering

Splunk

Log ingestion

Log parsing

Log normalization

Indexing

Retention policies

Correlation rules

Alerts and dashboards

Threat detection

Incident response

SOC support

Documentation

Education

Bachelor’s degree in a related field

Tools

Splunk

Job description

experienced SIEM Engineer to provide specialized engineering support for its enterprise Security Information and Event Management (SIEM) environment. The consultant will be responsible for designing, configuring, integrating, optimizing, and maintaining SIEM capabilities to strengthen security monitoring, threat detection, incident response, and log management.

This is a hands-on technical role reporting to the Director. Strategic direction, governance, and overall program oversight will remain with the Director.

Key Responsibilities

• Engineer, configure, maintain, and optimize the enterprise SIEM platform, including Splunk and related security technologies.
• Onboard new data sources and ensure proper log collection, parsing, normalization, indexing, and retention.
• Develop and maintain correlation searches, alerts, dashboards, reports, detection rules, and security monitoring content.
• Integrate SIEM capabilities with security tools, cloud platforms, applications, infrastructure, and enterprise systems.
• Monitor platform performance, capacity, availability, and overall health; troubleshoot technical issues as needed.
• Tune alerts and detection logic to reduce false positives and improve threat detection effectiveness.
• Provide technical support to SOC analysts and incident response teams, including queries, dashboards, and investigative capabilities.
• Support upgrades, patches, configuration changes, testing, and SIEM infrastructure implementation.
• Maintain technical documentation, operational procedures, system configurations, and knowledge-transfer materials.
• Collaborate with SOC, infrastructure, cloud, networking, and application teams on SIEM initiatives.
• Follow Commonwealth security standards, change-management processes, and applicable cybersecurity policies.

Ideal Candidate Profile

• Strong hands-on experience with Splunk and enterprise SIEM engineering.
• Experience with log ingestion, parsing, normalization, indexing, and retention.
• Proficiency in developing correlation searches, detection rules, alerts, dashboards, and reports.
• Experience integrating SIEM platforms with cloud, infrastructure, application, and security technologies.
• Strong troubleshooting, performance optimization, and alert-tuning skills.
• Experience supporting SOC operations, threat detection, and incident response.
• Excellent technical documentation and cross-functional collaboration skills.