SIEM Consultant (Splunk)

Seeking an experienced SIEM Consultant to provide hands-on engineering support for an enterprise SIEM environment, focusing on Splunk administration, security monitoring, threat detection, incident response, and log management. Key Responsibilities

• Engineer, configure, maintain, and optimize Splunk and related SIEM technologies.
• Onboard and integrate security log sources, ensuring proper collection, parsing, normalization, indexing, and retention.
• Develop and maintain SPL searches, correlation searches, alerts, dashboards, reports, and detection rules.
• Integrate SIEM with security tools, cloud platforms, applications, infrastructure, and enterprise systems.
• Monitor platform performance, capacity, availability, and health; troubleshoot SIEM, logging, ingestion, and integration issues.
• Tune alerts and detection logic to reduce false positives and improve threat detection.
• Support SOC analysts and incident response teams with queries, dashboards, and investigations.
• Support upgrades, patches, configuration changes, testing, and SIEM infrastructure implementation.
• Maintain technical documentation, operational procedures, system configurations, and knowledge-transfer materials.
• Collaborate with security, infrastructure, cloud, networking, and application teams while following security standards and change-management policies.

• Minimum 3 years of professional IT experience in SIEM, security engineering, cybersecurity operations, or security monitoring.
• Minimum 3 years of experience administering or engineering Splunk Enterprise and/or Splunk Enterprise Security.
• Minimum 3 years of experience onboarding and integrating security log sources using syslog, APIs, agents, or cloud-native integrations., * Splunk Enterprise Certified Admin certification.
• Experience in large enterprise or government environments.
• Proficiency in SPL searches, dashboards, alerts, correlation searches, and reports.
• Strong troubleshooting experience with SIEM, logging, data ingestion, and integrations.
• Familiarity with NIST and MITRE ATT&CK cybersecurity frameworks.