SIEM Engineer

• Build, enhance, and maintain advanced Splunk SPL queries to support security analytics, monitoring, and threat detection initiatives
• Integrate and onboard security tools and data sources into a centralized SIEM environment
• Create, manage, and optimize Splunk knowledge objects, including dashboards, alerts, reports, and saved searches
• Configure field extractions, lookups, and CIM-compliant data normalization to improve data quality and consistency
• Assist in incident response activities through the investigation and analysis of security events, providing actionable recommendations
• Partner with security and engineering stakeholders to develop detection content and improve overall SIEM effectiveness
• Document SIEM configurations, processes, and best practices to support operational excellence

• Minimum of 5 years of experience in cybersecurity, security operations, or SIEM engineering
• Active Secret security clearance is required
• Ability to work in a hybrid capacity from Durham, NC, or Fulton, MD
• Extensive hands-on experience with Splunk, including advanced SPL query development and optimization
• Strong understanding of Splunk knowledge objects, data models, and Common Information Model (CIM) normalization
• Experience integrating security technologies such as EDR, IDS/IPS, firewalls, and cloud security solutions into SIEM platforms
• Proven incident response and security operations experience

· Salary range: $115,000 - $135,000 depending on experience

· Comprehensive benefits package including medical, dental, vision, 401(k), and paid time off