SIEM Engineer

Provide hands-on engineering support for the enterprise SIEM environment, focusing on Splunk platform design, configuration, maintenance, and optimization.

Onboard and integrate security log sources, ensuring proper log collection, parsing, normalization, indexing, and retention.

Develop and maintain SPL searches, correlation rules, alerts, dashboards, and reports to strengthen threat detection and security monitoring.

Troubleshoot SIEM performance and data ingestion issues while supporting SOC analysts, incident response, upgrades, and system integrations.

Require 3+ years of SIEM/Splunk security experience; Splunk Enterprise Certified Admin, enterprise/government experience, and knowledge of NIST and MITRE ATT&CK are highly desired.