Splunk Engineer

Software Technology Inc.; Harrisburg (Dauphin County); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Software Technology Inc. is seeking a SIEM Engineer to support the design, configuration, integration, and maintenance of its enterprise SIEM environment with a focus on Splunk administration and log onboarding.

The role collaborates with SOC, infrastructure, cloud, and application teams, reporting to the Director, and requires hands-on Splunk administration, alerting, and detection engineering to strengthen security monitoring and incident response capabilities.

Qualifications

• 3+ years of experience in SIEM engineering or cybersecurity operations.
• Experience administering Splunk Enterprise and/or Splunk Enterprise Security for enterprise environments.
• Experience onboarding and integrating security log sources.

Responsibilities

• Administer, configure, maintain, and optimize Splunk Enterprise and Splunk Enterprise Security.
• Onboard and integrate log sources using syslog, APIs, agents, and cloud-native tech.
• Develop and maintain SPL searches, alerts, dashboards, reports, and correlation searches.
• Monitor SIEM performance, troubleshoot ingestion issues, and tune detections.

Skills

SIEM engineering

Cybersecurity operations

Log onboarding

Tools

Splunk Enterprise

Splunk Enterprise Security

Job description

need only local candidates from Pennsylvania

Location: Harrisburg, PA

Position: Hybrid

Duration: Long Term

Work Location: Hybrid onsite 3 days/week at 5th Floor Keystone Building | Harrisburg, PA 17120

Interview Type: In-person

Key Responsibilities

Job Description:

The Commonwealth is seeking an experienced SIEM Engineer to support the design, configuration, integration, and maintenance of its enterprise SIEM environment. The role focuses on Splunk administration, security log onboarding, detection engineering, platform optimization, and troubleshooting to strengthen security monitoring and incident response capabilities. The engineer will work closely with SOC, infrastructure, cloud, and application teams, reporting to the Director, who retains overall strategic direction and program oversight.

Key Responsibilities:

• Administer, configure, maintain, and optimize Splunk Enterprise and Splunk Enterprise Security.
• Onboard and integrate log sources using syslog, APIs, agents, and cloud-native technologies.
• Develop and maintain SPL searches, alerts, dashboards, reports, and correlation searches.
• Monitor SIEM performance, troubleshoot ingestion issues, and tune detections to reduce false positives.
• Support SOC analysts and incident response teams with technical queries and investigative tools.
• Perform upgrades, testing, configuration changes, and maintain technical documentation.
• Ensure compliance with Commonwealth security standards, policies, and change-management procedures.

Required Qualifications:

• Minimum 3 years of professional IT experience, including SIEM engineering, cybersecurity operations, or security monitoring.
• Minimum 3 years of experience administering or engineering Splunk Enterprise and/or Splunk Enterprise Security.
• Minimum 3 years of experience onboarding and integrating security log sources.

Preferred Qualifications:

• Experience in large enterprise or government environments.
• Strong SPL development and SIEM troubleshooting skills.
• Familiarity with NIST cybersecurity frameworks and MITRE ATT&CK.