SIEM Security Engineer

vTech Solution; Philadelphia (Philadelphia County); Hybride; USD 90 000 - 120 000; Plein temps

Résumé du poste

vTech Solution is seeking an experienced SIEM Security Engineer to manage and enhance our SIEM platform in a hybrid environment, focusing on log integration, threat detection, monitoring, and incident response.

The role requires hands-on work with Splunk Enterprise or Splunk Enterprise Security, on-site collaboration, and on-call incident support. Contract duration is 2 months, with onsite presence 3 days per week.

Qualifications

• 3+ years in SIEM, security engineering, cybersecurity operations, or security monitoring.
• 3+ years experience with Splunk Enterprise / Splunk Enterprise Security.
• 3+ years integrating log sources using syslog, APIs, agents, or cloud-native tools.

Responsabilités

• Configure, maintain, and optimize the SIEM platform.
• Onboard and integrate security log sources.
• Develop alerts, dashboards, reports, and detection rules.
• Troubleshoot platform and data integration issues.
• Support monitoring and incident response activities.

Connaissances

SIEM

Security engineering

Threat detection

Incident response

Outils

Splunk Enterprise

Splunk Enterprise Security

Log integration

Description du poste

Job Summary

Seeking an experienced SIEM Security Engineer to manage and enhance the SIEM platform, including log integration, threat detection, monitoring, and incident response within a hybrid environment.

Responsibilities

• Configure, maintain, and optimize the SIEM platform.
• Onboard and integrate security log sources.
• Develop alerts, dashboards, reports, and detection rules.
• Troubleshoot platform and data integration issues.
• Support monitoring and incident response activities.

Required Skills & Certifications

• 3+ years in SIEM, security engineering, cybersecurity operations, or security monitoring.
• 3+ years experience with Splunk Enterprise / Splunk Enterprise Security.
• 3+ years integrating log sources using syslog, APIs, agents, or cloud-native tools.

Preferred Skills & Certifications

• Splunk Enterprise Certified Admin.
• Experience in large enterprise or government environments.
• Experience with SPL, dashboards, alerts, and correlation searches.
• Familiarity with NIST and MITRE ATT&CK frameworks.

Special Considerations

• Work in a hybrid environment requiring onsite presence 3 days per week.

Scheduling

Hybrid schedule with onsite work 3 days per week.

Contract Duration

Contract duration of 2 months.