Sr SIEM Engineer (Splunk)

Job Summary

We are seeking a skilled professional to provide specialized engineering support for our Security Information and Event Management (SIEM) environment. This role involves designing, configuring, integrating, optimizing, and maintaining the SIEM platform to enhance enterprise security monitoring, threat detection, incident response, and log management capabilities. The position reports to the Director and offers hands-on technical support for the SIEM environment.

Responsibilities

• Engineer, configure, maintain, and optimize the enterprise SIEM platform, including Splunk and related security technologies.
• Onboard new data sources and ensure logs are properly collected, parsed, normalized, indexed, and retained.
• Develop and maintain correlation searches, alerts, dashboards, reports, detection rules, and other security monitoring content.
• Integrate SIEM capabilities with security tools, cloud platforms, applications, infrastructure, and other enterprise systems.
• Monitor SIEM platform performance, capacity, availability, and overall health, and troubleshoot technical issues.
• Tune alerts and detection logic to reduce false positives and improve the effectiveness of security monitoring.
• Support SOC analysts and incident response personnel by providing technical expertise, queries, dashboards, and investigative capabilities.
• Support upgrades, patches, configuration changes, testing, and implementation of supporting SIEM infrastructure.
• Develop and maintain technical documentation, operational procedures, system configurations, and knowledge-transfer materials.
• Collaborate with SOC, infrastructure, cloud, networking, and application teams on SIEM-related initiatives.
• Follow security standards, change-management processes, and applicable cybersecurity policies and requirements.

Qualifications

• Professional IT experience including at least three years in SIEM, security engineering, cybersecurity operations, or security monitoring technologies.
• Experience administering or engineering Splunk Enterprise and/or Splunk Enterprise Security.
• Demonstrated experience onboarding and integrating security log sources using technologies such as syslog, APIs, agents, or cloud-native integration.
• Splunk Enterprise Certified Admin certification is highly desired.
• Experience supporting a large enterprise or government environment is highly desired.
• Experience developing SPL searches, dashboards, alerts, correlation searches, and reports is highly desired.
• Experience troubleshooting complex SIEM, logging, data ingestion, or integration issues is highly desired.
• Familiarity with cybersecurity frameworks such as NIST and MITRE ATT&CK is highly desired.

Location

This position is based in Harrisburg, PA, a city known for its rich history and vibrant community. The role requires a hybrid work schedule with three days per week onsite at the 5th Floor Keystone Building.

Benefits
PEAK's benefit offerings available for our associates include medical, dental, vision, Flexible Spending Account (FSA), Dependent Care Savings Account (DCA), and 401K plan. PEAK believes that taking care of our team is essential for success and we are proud to provide benefits that enhance both your well-being and your future. Additionally, our associates may be eligible for Paid Sick Leave as required by Federal, State, or local laws.  

Equal Opportunity Employer (EEO) 
PEAK Technical Staffing is committed to creating a diverse and inclusive environment and is proud to be an Equal Opportunity Employer. PEAK does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status, or any other characteristic protected by applicable law. All employment decisions are made based on qualifications, merit, and business need. We encourage all individuals to apply. 

Americans Disabilities Act (ADA) 
The physical and mental requirements described in this job description are representative of those that must be met by an employee to successfully perform the essential functions of the position. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions. Must be able to perform the essential physical functions of the position, including sitting, standing, walking, stooping, kneeling, and lifting up to 25 pounds, with or without reasonable accommodation. 

Candidate Privacy
To read our Candidate Privacy Information Statement, which explains how we will use your information, please navigate to https://peaktechnical.com/privacy-policy/ and https://peaktechnical.com/ca-residents-privacy-rights/  

AI Recruiting Disclosure 
We use AI-assisted tools to help review applications and compare your experience to job requirements, but all hiring decisions are made by human recruiters. You may request a human-only process or opt out of automated communication at any time. Required notices and our latest bias audit are available on our website: www.peaktechnical.com/ai-disclosure.