> Markdown version of [/jobs/ext/4013340-senior-siem-engineer](https://www.wearedevelopers.com/jobs/ext/4013340-senior-siem-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior SIEM Engineer

- **Company:** THE PHOENIX
- **Location:** Harrisburg, PA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Cloud Computing, Cloud Engineering, Data Integration, Intrusion Detection and Prevention, Security Log, Security Information and Event Management, Syslog, Systems Integration, Data Logging, Data Ingestion, Splunk
- **Published:** October 29, 2026
- **Apply:** https://www.thejobnetwork.com/job/28d94407-30e4-4bb3-9027-6609728aab83/senior-siem-engineer

## About the Role

* 3 years of experience in SIEM, security engineering, cybersecurity operations, or security monitoring.
 * 3 years of experience administering or engineering Splunk Enterprise and/or Splunk Enterprise Security.
 * 3 years of experience onboarding and integrating security log sources using syslog, APIs, agents, or cloud-native integrations., * Splunk Enterprise Certified Admin certification.
 * Experience in large enterprise or government environments.
 * Strong SPL skills, including searches, dashboards, alerts, and correlation searches.
 * Experience troubleshooting SIEM, logging, and data integration issues.
 * Familiarity with NIST cybersecurity frameworks and MITRE Telecommunication&CK.

## Description

We are seeking a Senior SIEM Engineer to provide hands-on engineering support for the Commonwealth's enterprise Security Information and Event Management (SIEM) environment. The ideal candidate will have strong experience with Splunk, security log integration, threat detection, and enterprise security monitoring., * Configure, maintain, and optimize Splunk and related SIEM technologies.

 * Integrate and onboard security log sources from applications, infrastructure, and cloud platforms.
 * Develop SPL searches, dashboards, alerts, correlation searches, and reports.
 * Monitor SIEM performance, troubleshoot data ingestion issues, and reduce false-positive alerts.
 * Support SOC analysts and incident response teams with technical investigations.
 * Perform upgrades, patches, testing, and configuration changes.
 * Maintain technical documentation and collaborate with security, cloud, networking, and infrastructure teams.
 * Follow security policies, standards, and change-management procedures.