Search Jobs | Dice.com

1 results (1 new)

Group by company

Information and Event Management (SIEM) Consultant

Sarum LLC

Hybrid in Harrisburg, Pennsylvania • Today

Easy Apply

Third Party, Contract

65 - 70

Job Details

Skills

SIEM Consultant
Splunk Engineer
Splunk Administrator
Splunk Enterprise Security
Security Engineer
Cybersecurity
SIEM Administration
SPL
Log Management
Security Monitoring
Threat Detection
Incident Response
SOC
Security Information and Event Management
NIST
MITRE ATT&CK.

Summary

We are seeking an experienced Security Information and Event Management (SIEM) Consultant to provide specialized engineering and technical support for the Commonwealth’s enterprise SIEM environment. The consultant will support the design, configuration, integration, optimization, and ongoing operation of the SIEM platform to strengthen security monitoring, threat detection, incident response, and enterprise log management capabilities.

The ideal candidate will have strong hands-on experience with Splunk Enterprise and/or Splunk Enterprise Security, security log ingestion, detection engineering, and SIEM administration in a large enterprise or government environment.

This position reports to the Director and focuses on hands-on technical implementation and operational support. Strategic direction, governance, and overall program oversight will remain with the Director.

Key Responsibilities

Engineer, configure, maintain, and optimize the enterprise SIEM platform, including Splunk and related security technologies.
Onboard new data sources and ensure logs are properly collected, parsed, normalized, indexed, and retained.
Develop and maintain SPL searches, correlation searches, alerts, dashboards, reports, and detection rules.
Integrate SIEM capabilities with security tools, cloud platforms, applications, infrastructure, and enterprise systems.
Monitor SIEM platform performance, capacity, availability, and overall system health; troubleshoot technical issues.
Tune alerts and detection logic to reduce false positives and improve threat detection effectiveness.
Support SOC analysts and incident response teams by providing technical expertise, investigative queries, dashboards, and reporting capabilities.
Support SIEM upgrades, patches, configuration changes, testing, and implementation of supporting infrastructure.
Develop and maintain technical documentation, operational procedures, system configurations, and knowledge-transfer materials.
Collaborate with SOC, infrastructure, cloud, networking, and application teams on SIEM-related initiatives.
Follow Commonwealth security standards, change-management procedures, and applicable cybersecurity policies.

Required Qualifications

At least 3 years of professional IT experience supporting SIEM, security engineering, cybersecurity operations, or security monitoring technologies.
At least 3 years of experience administering or engineering Splunk Enterprise and/or Splunk Enterprise Security.
At least 3 years of experience onboarding and integrating security log sources using technologies such as syslog, APIs, agents, or cloud-native integrations.

Desired Qualifications

Splunk Enterprise Certified Admin certification.
Experience supporting large enterprise or government IT environments.
Hands-on experience developing SPL searches, dashboards, alerts, correlation searches, and reports.
Strong troubleshooting skills involving SIEM platforms, log ingestion, data parsing, and system integrations.
Familiarity with cybersecurity frameworks and methodologies, including NIST and MITRE ATT&CK.
Experience supporting Security Operations Center (SOC) operations, threat detection, and incident response.
Strong analytical, communication, documentation, and problem-solving skills.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 91116024
Position Id: 9111597
Posted 19 hours ago

Fitment

Dice Job Match Score™

To see how well you match this job, please log in or create an account.

Once logged in, be sure to complete your profile to get the most accurate match score.

Contact the job poster

Dilya Zakirova

Recruiter. @ Sarum LLC

View Profile

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

SIEM Consultant (Splunk)

Hybrid in Harrisburg, Pennsylvania

•

3d ago

HonorVet Technologies is a Service Disable Veteran-Owned IT staffing firm, ISO 9001 and ISO 27001 certified, working with federal agencies, state governments, and Fortune 500 enterprise clients across the US. What makes us different isn't a tagline; it's the way we work. We don't forward resumes and hope for the best. We take the time to understand where a professional like you is headed and only reach out when we genuinely believe there's a fit worth exploring. Job Title: SIEM Consultant (Splu

Easy Apply

Third Party, Contract

$90 - $95

SIEM Engineer with Splunk

Hybrid in Harrisburg, Pennsylvania

•

3d ago

Job: SIEM Engineer Splunk Client: Commonwealth of Pennsylvania Location: Harrisburg, PA 17120 Work Model: Hybrid Onsite 3 days per week Interview: In-person Job Summary We are looking for a SIEM Engineer with strong Splunk experience to support enterprise cybersecurity monitoring, threat detection, log management, and incident response. The candidate will be responsible for configuring, maintaining, and optimizing the SIEM platform and integrating security log sources across enterprise systems

Easy Apply

Contract, Third Party

Depends on Experience

SIEM Engineer

Hybrid in Harrisburg, Pennsylvania

•

3d ago

SIEM Engineer (Splunk) Location: Harrisburg, PA 17120 Work Arrangement: Hybrid Onsite 3 days per week Interview Process: In-person Employment Type: Contract Job Summary We are seeking an experienced SIEM Engineer with strong Splunk expertise to support the design, configuration, integration, optimization, and ongoing operation of an enterprise Security Information and Event Management (SIEM) environment. The ideal candidate will have hands-on experience with Splunk Enterprise and/or

Easy Apply

Contract, Third Party

Depends on Experience

SIEM / Splunk Engineer

Harrisburg, Pennsylvania

•

Today

Location: Harrisburg, PA Salary: $90.00 USD Hourly - $95.00 USD Hourly Description: Role Summary The client is seeking a SIEM-focused IT Consultant to provide specialized engineering support for an enterprise security monitoring environment. The consultant will support the design, configuration, integration, optimization, and ongoing operation of a Splunk-based SIEM platform to strengthen threat detection, incident response, log management, and security monitoring capabilities. Key Responsibi

Contract

Compensation information provided in the description

Job Details

Skills

SIEM Consultant
Splunk Engineer
Splunk Administrator
Splunk Enterprise Security
Security Engineer
Cybersecurity
SIEM Administration
SPL
Log Management
Security Monitoring
Threat Detection
Incident Response
SOC
Security Information and Event Management
NIST
MITRE ATT&CK.

Summary

Key Responsibilities

Engineer, configure, maintain, and optimize the enterprise SIEM platform, including Splunk and related security technologies.
Onboard new data sources and ensure logs are properly collected, parsed, normalized, indexed, and retained.
Develop and maintain SPL searches, correlation searches, alerts, dashboards, reports, and detection rules.
Integrate SIEM capabilities with security tools, cloud platforms, applications, infrastructure, and enterprise systems.
Monitor SIEM platform performance, capacity, availability, and overall system health; troubleshoot technical issues.
Tune alerts and detection logic to reduce false positives and improve threat detection effectiveness.
Support SOC analysts and incident response teams by providing technical expertise, investigative queries, dashboards, and reporting capabilities.
Support SIEM upgrades, patches, configuration changes, testing, and implementation of supporting infrastructure.
Develop and maintain technical documentation, operational procedures, system configurations, and knowledge-transfer materials.
Collaborate with SOC, infrastructure, cloud, networking, and application teams on SIEM-related initiatives.
Follow Commonwealth security standards, change-management procedures, and applicable cybersecurity policies.

Required Qualifications

At least 3 years of professional IT experience supporting SIEM, security engineering, cybersecurity operations, or security monitoring technologies.
At least 3 years of experience administering or engineering Splunk Enterprise and/or Splunk Enterprise Security.
At least 3 years of experience onboarding and integrating security log sources using technologies such as syslog, APIs, agents, or cloud-native integrations.

Desired Qualifications

Splunk Enterprise Certified Admin certification.
Experience supporting large enterprise or government IT environments.
Hands-on experience developing SPL searches, dashboards, alerts, correlation searches, and reports.
Strong troubleshooting skills involving SIEM platforms, log ingestion, data parsing, and system integrations.
Familiarity with cybersecurity frameworks and methodologies, including NIST and MITRE ATT&CK.
Experience supporting Security Operations Center (SOC) operations, threat detection, and incident response.
Strong analytical, communication, documentation, and problem-solving skills.

Dice Id: 91116024
Position Id: 9111597
Posted 19 hours ago

Fitment