SIEM Engineer - 173870
Responsibilities of the SIEM Engineer:- Build, enhance, and maintain advanced Splunk SPL queries to support security analytics, monitoring, and threat detection initiatives
- Integrate and onboard security tools and data sources into a centralized SIEM environment
- Create, manage, and optimize Splunk knowledge objects, including dashboards, alerts, reports, and saved searches
- Configure field extractions, lookups, and CIM-compliant data normalization to improve data quality and consistency
- Assist in incident response activities through the investigation and analysis of security events, providing actionable recommendations
- Partner with security and engineering stakeholders to develop detection content and improve overall SIEM effectiveness
- Document SIEM configurations, processes, and best practices to support operational excellence
Qualifications of the SIEM Engineer:- Minimum of 5 years of experience in cybersecurity, security operations, or SIEM engineering
- Active Secret security clearance is required
- Ability to work in a hybrid capacity from Durham, NC, or Fulton, MD
- Extensive hands-on experience with Splunk, including advanced SPL query development and optimization
- Strong understanding of Splunk knowledge objects, data models, and Common Information Model (CIM) normalization
- Experience integrating security technologies such as EDR, IDS/IPS, firewalls, and cloud security solutions into SIEM platforms
- Proven incident response and security operations experience
Compensation for the SIEM Engineer includes:• Salary range: $115,000 - $135,000 depending on experience
• Comprehensive benefits package including medical, dental, vision, 401(k), and paid time off
This job opens for applications on 9/4/2026. Applications for this job will be accepted for at least 30 days from the posting date.
Keywords: SIEM Engineer, Splunk, Cybersecurity, Security Operations, SOC, Security Information and Event Management, SPL, Splunk Enterprise, Threat Detection, Threat Hunting, Incident Response, Security Monitoring, Log Analysis, Security Engineering, Security Analytics, SIEM Administration, Data Normalization, CIM, Common Information Model, Field Extractions, Security Alerts, Dashboard Development, Security Automation, Splunk Dashboards, Splunk Reports, EDR, IDS, IPS, Firewall Security, Cloud Security, Security Tools Integration, Detection Engineering, Security Events, Information Security, Network Security, Enterprise Security, Active Secret Clearance, Secret Clearance, Hybrid, Durham NC, North Carolina, Fulton MD, Maryland
#LI-RB1 #LI-HYBRID
