> Markdown version of [/jobs/ext/4473623-siem-consultant-splunk](https://www.wearedevelopers.com/jobs/ext/4473623-siem-consultant-splunk). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SIEM Consultant (Splunk)

- **Company:** HonorVet Technologies
- **Location:** Harrisburg, PA, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Cloud Computing, Cloud Engineering, System Configuration, Intrusion Detection and Prevention, Parsing, Security Log, Security Information and Event Management, Syslog, Systems Integration, Data Logging, Enterprise Software Applications, Data Ingestion, Mitre Att&ck, Indexer, Information Technology, Splunk
- **Published:** October 9, 2026
- **Apply:** https://www.careerjet.com/jobad/us4cd6abc800df74b611baa68b65b51779

## About the Role

* Minimum 3 years of professional IT experience in SIEM, security engineering, cybersecurity operations, or security monitoring.
 * Minimum 3 years of experience administering or engineering Splunk Enterprise and/or Splunk Enterprise Security.
 * Minimum 3 years of experience onboarding and integrating security log sources using syslog, APIs, agents, or cloud-native integrations., * Splunk Enterprise Certified Admin certification.
 * Experience in large enterprise or government environments.
 * Proficiency in SPL searches, dashboards, alerts, correlation searches, and reports.
 * Strong troubleshooting experience with SIEM, logging, data ingestion, and integrations.
 * Familiarity with NIST and MITRE ATT&CK cybersecurity frameworks.

## Description

Seeking an experienced SIEM Consultant to provide hands-on engineering support for an enterprise SIEM environment, focusing on Splunk administration, security monitoring, threat detection, incident response, and log management.
Key Responsibilities

 * Engineer, configure, maintain, and optimize Splunk and related SIEM technologies.
 * Onboard and integrate security log sources, ensuring proper collection, parsing, normalization, indexing, and retention.
 * Develop and maintain SPL searches, correlation searches, alerts, dashboards, reports, and detection rules.
 * Integrate SIEM with security tools, cloud platforms, applications, infrastructure, and enterprise systems.
 * Monitor platform performance, capacity, availability, and health; troubleshoot SIEM, logging, ingestion, and integration issues.
 * Tune alerts and detection logic to reduce false positives and improve threat detection.
 * Support SOC analysts and incident response teams with queries, dashboards, and investigations.
 * Support upgrades, patches, configuration changes, testing, and SIEM infrastructure implementation.
 * Maintain technical documentation, operational procedures, system configurations, and knowledge-transfer materials.
 * Collaborate with security, infrastructure, cloud, networking, and application teams while following security standards and change-management policies.