HonorVet Technologies

HonorVet Technologies is a Service Disable Veteran-Owned IT staffing firm, ISO 9001 and ISO 27001 certified, working with federal agencies, state governments, and Fortune 500 enterprise clients across the US. What makes us different isn't a tagline; it's the way we work. We don't forward resumes and hope for the best. We take the time to understand where a professional like you is headed and only reach out when we genuinely believe there's a fit worth exploring.
&nbsp;
**Job Title: SIEM Consultant (Splunk)
Duration: 2+ Months
Location: Harrisburg, PA**
**Work Environment: Hybrid - Onsite 3 Days/Week
Working Hours: 7.5 Hours/Day
Interview Mode: In-Person Only**
&nbsp;
Job Summary
Seeking an experienced SIEM Consultant to provide hands-on engineering support for an enterprise SIEM environment, focusing on Splunk administration, security monitoring, threat detection, incident response, and log management.
&nbsp;
Key Responsibilities
<ul>
<li>Engineer, configure, maintain, and optimize Splunk and related SIEM technologies.</li>
<li>Onboard and integrate security log sources, ensuring proper collection, parsing, normalization, indexing, and retention.</li>
<li>Develop and maintain SPL searches, correlation searches, alerts, dashboards, reports, and detection rules.</li>
<li>Integrate SIEM with security tools, cloud platforms, applications, infrastructure, and enterprise systems.</li>
<li>Monitor platform performance, capacity, availability, and health; troubleshoot SIEM, logging, ingestion, and integration issues.</li>
<li>Tune alerts and detection logic to reduce false positives and improve threat detection.</li>
<li>Support SOC analysts and incident response teams with queries, dashboards, and investigations.</li>
<li>Support upgrades, patches, configuration changes, testing, and SIEM infrastructure implementation.</li>
<li>Maintain technical documentation, operational procedures, system configurations, and knowledge-transfer materials.</li>
<li>Collaborate with security, infrastructure, cloud, networking, and application teams while following security standards and change-management policies.</li>
</ul>
&nbsp;
Required Qualifications
<ul>
<li>Minimum 3 years of professional IT experience in SIEM, security engineering, cybersecurity operations, or security monitoring.</li>
<li>Minimum 3 years of experience administering or engineering Splunk Enterprise and/or Splunk Enterprise Security.</li>
<li>Minimum 3 years of experience onboarding and integrating security log sources using syslog, APIs, agents, or cloud-native integrations.</li>
</ul>
&nbsp;
Preferred Qualifications
<ul>
<li>Splunk Enterprise Certified Admin certification.</li>
<li>Experience in large enterprise or government environments.</li>
<li>Proficiency in SPL searches, dashboards, alerts, correlation searches, and reports.</li>
<li>Strong troubleshooting experience with SIEM, logging, data ingestion, and integrations.</li>
<li>Familiarity with NIST and MITRE ATT&amp;CK cybersecurity frameworks.</li>
</ul>
&nbsp;
If you are interested, feel free to reach out to me directly at <a href="mailto:paula.scott@honorvettech.com" rel="nofollow noopener" target="_blank">paula.scott@honorvettech.com</a>

SIEM Consultant (Splunk)

SIEM Consultant (Splunk)

This job is no longer available

Talents

Recruiters

About