Siem Consultant Splunk

Title: SIEM Consultant (Splunk)
Location: Harrisburg, PA (Hybrid, onsite 3 days/week)
Duration: Fulltime

Job Description:
The client needs an experienced SIEM consultant to provide hands-on engineering support for an enterprise SIEM environment. The work covers Splunk administration, security monitoring, threat detection, incident response, and log management.

Responsibilities

• Engineer, configure, maintain, and optimize Splunk and related SIEM technologies.
• Onboard and integrate security log sources, covering collection, parsing, normalization, indexing, and retention.
• Build and maintain SPL searches, correlation searches, alerts, dashboards, reports, and detection rules.
• Integrate the SIEM with security tools, cloud platforms, applications, and infrastructure.
• Monitor platform performance, capacity, and health, and troubleshoot ingestion and integration issues.
• Tune alerts and detection logic to reduce false positives.
• Support SOC analysts and incident response teams with queries, dashboards, and investigations.
• Support upgrades, patches, configuration changes, and testing.
• Maintain documentation, procedures, configurations, and knowledge-transfer materials.
• Work with security, infrastructure, cloud, network, and application teams under change-management policy.

Required

• 3+ years of IT experience in SIEM, security engineering, cybersecurity operations, or security monitoring.
• 3+ years administering or engineering Splunk Enterprise and/or Splunk Enterprise Security.
• 3+ years onboarding security log sources using syslog, APIs, agents, or cloud-native integrations.