SIEM Engineer – Splunk Expert, Hybrid (Govt)

Domino Technologies, Inc.; Harrisburg (Dauphin County); Hybrid; USD 100,000 - 140,000; Full time

Benefits offered by this job

Paid Holidays and Vacation

Positive Work-Life Balance

Job summary

Domino Technologies, Inc. seeks an experienced SIEM engineer to support the Commonwealth of Pennsylvania OA-EISO. Hybrid work with on-site in Harrisburg, PA and remote options; 3 days on-site, 2 remote.

The role focuses on designing, configuring, and operating the SIEM platform to strengthen security monitoring and incident response. Responsibilities include onboarding data sources, developing correlation searches, dashboards, and alerts; integrating SIEM with security tools and cloud platforms;

Qualifications

• 3+ years experience supporting SIEM, security engineering, cybersecurity operations, or security monitoring.
• 3+ years experience administering Splunk Enterprise and/or Splunk Enterprise Security.
• 3+ years experience onboarding and integrating security log sources using syslog, APIs, agents, or cloud-native integration.
• Splunk Enterprise Certified Admin certification is highly desired.
• Experience in a large enterprise or government environment is highly desired.
• Experience developing SPL searches, dashboards, alerts, correlation searches, and reports is highly desired.
• Familiarity with NIST and MITRE ATT&CK frameworks is highly desired.

Responsibilities

• Engineer, configure, maintain, and optimize the enterprise SIEM platform, including Splunk and related security technologies.
• Onboard new data sources and ensure logs are collected, parsed, normalized, indexed, and retained.
• Develop and maintain correlation searches, alerts, dashboards, reports, detection rules, and other security monitoring content.
• Integrate SIEM capabilities with security tools, cloud platforms, applications, infrastructure, and other enterprise systems.
• Monitor SIEM platform performance, capacity, availability, and troubleshoot issues.
• Tune alerts and detection logic to reduce false positives and improve monitoring effectiveness.
• Support SOC analysts and incident response personnel with queries, dashboards, and investigative capabilities.
• Support upgrades, patches, configuration changes, testing, and implementation of supporting SIEM infrastructure.
• Develop and maintain technical documentation and knowledge-transfer materials.
• Collaborate with SOC, infrastructure, cloud, networking, and applications teams on SIEM initiatives.
• Follow Commonwealth security standards and change-management processes.

Skills

SIEM engineering

Splunk

Log onboarding

Detection dashboards

Incident response

Security monitoring

Govt experience

Tools

Splunk Enterprise

Splunk Enterprise Security

Syslog

APIs

Job description

Domino Technologies, Inc. seeks an experienced SIEM engineer to support the Commonwealth of Pennsylvania OA-EISO. Hybrid work with on-site in Harrisburg, PA and remote options; 3 days on-site, 2 remote.

The role focuses on designing, configuring, and operating the SIEM platform to strengthen security monitoring and incident response. Responsibilities include onboarding data sources, developing correlation searches, dashboards, and alerts; integrating SIEM with security tools and cloud platforms;