Splunk SIEM Engineer

Splunk SIEM Engineer Location: Harrisburg, PA 17120 Work Arrangement: Hybrid - 3 Days Onsite per Week Employment Type: Contract Interview Type: In-Person Work Location: Keystone Building, Harrisburg, PA About the Opportunity We are seeking an experienced Splunk SIEM Engineer to support a large-scale enterprise cybersecurity environment for a Pennsylvania state government agency. The ideal candidate will have strong hands-on expertise in Splunk Enterprise, Splunk Enterprise Security (ES), SIEM administration, security log integration, and threat detection engineering. This position focuses on optimizing enterprise security monitoring, strengthening threat detection capabilities, improving incident response, and ensuring the reliability and performance of the SIEM infrastructure. Candidates must be available to work onsite in Harrisburg, PA, three days per week and attend an in-person interview. Local candidates are strongly preferred. Key Responsibilities SIEM Engineering & Administration Engineer, configure, maintain, and optimize Splunk Enterprise and related SIEM technologies. Monitor SIEM platform health, performance, capacity, and availability. Troubleshoot complex SIEM configuration, logging, and integration issues. Support platform upgrades, patches, testing, and infrastructure improvements. Security Monitoring & Threat Detection Develop and maintain SPL searches, correlation rules, alerts, dashboards, and security reports. Optimize detection logic to reduce false positives and improve threat identification. Support Security Operations Center (SOC) analysts with advanced searches, investigations, and incident response. Enhance security visibility across enterprise systems and infrastructure. Log Management & Integration Onboard and integrate security log sources using syslog, APIs, agents, and cloud-native integrations. Ensure accurate log collection, parsing, normalization, indexing, and retention. Integrate SIEM capabilities with cloud platforms, security tools, applications, and network infrastructure. Resolve data ingestion and integration issues to maintain effective security monitoring. Collaboration & Documentation Collaborate with cybersecurity, SOC, infrastructure, cloud, networking, and application teams. Maintain technical documentation, operational procedures, and system configurations. Follow established cybersecurity standards, policies, and change-management procedures. Required Qualifications 3+ years of professional IT experience supporting SIEM platforms, security engineering, cybersecurity operations, or security monitoring technologies. 3+ years of hands-on experience administering or engineering Splunk Enterprise and/or Splunk Enterprise Security (ES). 3+ years of experience onboarding and integrating security log sources using syslog, APIs, agents, or cloud-native integrations. Ability to work onsite in Harrisburg, PA, three days per week. Highly Preferred Qualifications Splunk Enterprise Certified Admin certification. Experience supporting large enterprise or government cybersecurity environments. Strong experience developing Splunk Processing Language (SPL) searches, dashboards, alerts, correlation searches, and reports. Proven ability to troubleshoot complex SIEM, log ingestion, and integration issues. Familiarity with cybersecurity frameworks, including NIST and MITRE ATT&CK. Ideal Candidate Profile The successful candidate will be a hands-on SIEM engineer with a strong technical background in Splunk administration, security data integration, and detection engineering. We are particularly interested in professionals who can independently troubleshoot SIEM issues, optimize security monitoring capabilities, and collaborate effectively with enterprise security teams. Work Location & Interview Requirements Location: Harrisburg, Pennsylvania 17120 Schedule: Hybrid - 3 days onsite per week Interview: In-person Contract: Expected to extend beyond December 31 Applicants should be within a reasonable commuting distance of Harrisburg or be able to meet the required onsite schedule.