Splunk Engineer

need only local candidates from Pennsylvania

Role: Splunk Engineer

Location: Harrisburg, PA

Position: Hybrid

Duration: Long Term

Work Location: Hybrid onsite 3 days/week at 5th Floor Keystone Building | Harrisburg, PA 17120

Interview Type: In-person

Key Responsibilities

Job Description:

The Commonwealth is seeking an experienced SIEM Engineer to support the design, configuration, integration, and maintenance of its enterprise SIEM environment. The role focuses on Splunk administration, security log onboarding, detection engineering, platform optimization, and troubleshooting to strengthen security monitoring and incident response capabilities. The engineer will work closely with SOC, infrastructure, cloud, and application teams, reporting to the Director, who retains overall strategic direction and program oversight.

Key Responsibilities:

• Administer, configure, maintain, and optimize Splunk Enterprise and Splunk Enterprise Security.
• Onboard and integrate log sources using syslog, APIs, agents, and cloud-native technologies.
• Develop and maintain SPL searches, alerts, dashboards, reports, and correlation searches.
• Monitor SIEM performance, troubleshoot ingestion issues, and tune detections to reduce false positives.
• Support SOC analysts and incident response teams with technical queries and investigative tools.
• Perform upgrades, testing, configuration changes, and maintain technical documentation.
• Ensure compliance with Commonwealth security standards, policies, and change-management procedures.

Required Qualifications:

• Minimum 3 years of professional IT experience, including SIEM engineering, cybersecurity operations, or security monitoring.
• Minimum 3 years of experience administering or engineering Splunk Enterprise and/or Splunk Enterprise Security.
• Minimum 3 years of experience onboarding and integrating security log sources.

Preferred Qualifications:

• Splunk Enterprise Certified Admin certification.
• Experience in large enterprise or government environments.
• Strong SPL development and SIEM troubleshooting skills.
• Familiarity with NIST cybersecurity frameworks and MITRE ATT&CK.

Best Regards,

Mohan Sai | Senior Technical Recruiter - HealthTech & Commercial IT

Software Technology Inc. (STI)

📍 100 Overlook Center, Suite 200, Princeton, NJ 08540

📞 609-459-0206 | ✉️ [email protected]

🔗 LinkedIn | 🌐 stiorg.com