Cybersecurity Engineer

Saxon Global•Harrisburg, PA

24d

About The Position

The Cybersecurity Engineer engineers, configures, maintains, and optimizes the enterprise SIEM platform, including Splunk and related security technologies. The role supports security monitoring by onboarding data sources, developing detection content, integrating the SIEM with enterprise systems, and maintaining platform performance and availability. The engineer also provides technical support to SOC analysts and incident response personnel, documents operational procedures and configurations, and collaborates with technical teams while following Commonwealth security standards and processes.

Responsibilities

Engineer, configure, maintain, and optimize the enterprise SIEM platform, including Splunk and related security technologies.
Onboard data sources and ensure logs are collected, parsed, normalized, indexed, and retained properly.
Develop and maintain correlation searches, alerts, dashboards, reports, detection rules, and other security monitoring content.
Integrate SIEM capabilities with security tools, cloud platforms, applications, infrastructure, and other enterprise systems.
Monitor SIEM performance, capacity, availability, and overall health, and troubleshoot technical issues.
Tune alerts and detection logic to reduce false positives and improve security monitoring effectiveness.
Provide technical expertise, queries, dashboards, and investigative capabilities to SOC analysts and incident response personnel.
Support upgrades, patches, configuration changes, testing, and implementation of supporting SIEM infrastructure.
Develop and maintain technical documentation, operational procedures, system configurations, and knowledge-transfer materials.
Collaborate with SOC, infrastructure, cloud, networking, and application teams on SIEM-related initiatives.
Follow Commonwealth security standards, change-management processes, and applicable cybersecurity policies and requirements.