Securtiy Engineer

a { text-decoration: none; color: #464feb; } tr th, tr td { border: 1px solid #e6e6e6; } tr th { background-color: #f5f5f5; }

One of our client int the governemnt domain is seeking a Security Engineer with strong expertise in SIEM technologies, particularly Splunk, who can manage enterprise-scale security monitoring solutions, support SOC operations, improve threat detection capabilities, and ensure the reliability and effectiveness of the Commonwealth//'s security monitoring environment.

Security Engineer (SIEM)
Work Location: Hybrid - Onsite 3 days per week at 5th Floor Keystone Building, Harrisburg, PA 17120
Interview Type: In-Person

a { text-decoration: none; color: #464feb; } tr th, tr td { border: 1px solid #e6e6e6; } tr th { background-color: #f5f5f5; }

a { text-decoration: none; color: #464feb; } tr th, tr td { border: 1px solid #e6e6e6; } tr th { background-color: #f5f5f5; }

Provide specialized engineering support for the Commonwealth//'s Security Information and Event Management (SIEM) environment. The Security Engineer will be responsible for the design, configuration, integration, optimization, and ongoing administration of the enterprise SIEM platform, including Splunk, to enhance security monitoring, threat detection, incident response, and log management capabilities. This position reports to the Director and provides hands-on technical support for the SIEM environment. Strategic direction, governance, and overall program oversight remain with the Director.

Key Responsibilities

• Engineer, configure, maintain, and optimize the enterprise SIEM platform, including Splunk and related security technologies.
• Onboard new data sources and ensure logs are properly collected, parsed, normalized, indexed, and retained.
• Develop and maintain correlation searches, alerts, dashboards, reports, detection rules, and other security monitoring content.
• Integrate SIEM capabilities with security tools, cloud platforms, applications, infrastructure, and other enterprise systems.
• Monitor SIEM platform performance, capacity, availability, and overall health; troubleshoot and resolve technical issues.
• Tune alerts and detection logic to reduce false positives and improve the effectiveness of security monitoring.
• Support SOC analysts and incident response teams by providing technical expertise, investigative queries, dashboards, and reporting capabilities.
• Support upgrades, patches, configuration changes, testing, and implementation of supporting SIEM infrastructure.
• Develop and maintain technical documentation, operational procedures, system configurations, and knowledge transfer materials.
• Collaborate with SOC, infrastructure, cloud, networking, and application teams on SIEM-related initiatives.
• Follow Commonwealth security standards, change-management processes, and applicable cybersecurity policies and requirements.

Required Skills

• SIEM Engineering and Administration
• Splunk Enterprise / Splunk Enterprise Security (ES)
• Log Management and Data Onboarding
• Security Monitoring and Threat Detection
• Correlation Search and Alert Development
• Incident Response Support
• Security Operations Center (SOC) Support
• Dashboard and Report Development
• Security Tool Integration
• Cloud Security Monitoring
• Infrastructure and Network Security
• Performance Tuning and Troubleshooting
• Technical Documentation
• Cybersecurity Compliance and Governance

Preferred Qualifications

• Experience supporting large-scale enterprise SIEM environments.
• Strong proficiency with Splunk architecture, administration, and use-case development.
• Experience integrating cloud, network, endpoint, and security technologies into SIEM platforms.
• Knowledge of cybersecurity frameworks, incident response processes, and threat detection methodologies.
• Ability to collaborate effectively with cross-functional technical and security teams.

Ideal Candidate

A hands-on Security Engineer with strong expertise in SIEM technologies, particularly Splunk, who can manage enterprise-scale security monitoring solutions, support SOC operations, improve threat detection capabilities, and ensure the reliability and effectiveness of the Commonwealth//'s security monitoring environment.