Security Information and Event Management (SIEM) Engineer (HYBRID PENNSYLVANIA BASED)

Forest Pond Associates is seeking a hands-on SIEM Engineer to support the design, configuration, integration, optimization, and operation of an enterprise security monitoring environment. The role focuses on Splunk and related technologies to strengthen security monitoring, threat detection, incident response, and log management, while providing direct technical support to the client’s SIEM environment.

Responsibilities

Engineer, configure, maintain, and optimize the enterprise SIEM platform, including Splunk and related security technologiesOnboard data sources and ensure logs are collected, parsed, normalized, indexed, and retained appropriatelyDevelop and maintain correlation searches, alerts, dashboards, reports, detection rules, and other security monitoring contentIntegrate SIEM capabilities with security tools, cloud platforms, applications, infrastructure, and other enterprise systemsMonitor platform performance, capacity, availability, and health; troubleshoot technical issuesTune alerts and detection logic to reduce false positives and improve monitoring effectivenessSupport SOC analysts and incident response personnel with technical expertise, searches, dashboards, and investigative capabilitiesSupport upgrades, patches, configuration changes, testing, and implementation of supporting SIEM infrastructureDevelop and maintain technical documentation, operational procedures, system configurations, and knowledge-transfer materialsCollaborate with security operations, infrastructure, cloud, networking, and application teams on SIEM-related initiativesFollow applicable security standards, change-management processes, and cybersecurity policies and requirements
Skills

Experience engineering, configuring, or administering an enterprise SIEM platformPreferably SplunkPractical experience onboarding and managing log sources, including parsing, normalization, indexing, and retentionAbility to develop and maintain searches, alerts, dashboards, reports, and security detection contentExperience integrating SIEM platforms with security tools, cloud services, applications, or enterprise infrastructureFamiliarity with SIEM performance monitoring, troubleshooting, upgrades, and configuration managementUnderstanding of security monitoring, threat detection, SOC workflows, and incident response supportStrong analytical and problem-solving skills, with the ability to investigate technical issues and improve detection qualityAbility to document technical configurations and procedures clearlyEffective communication and collaboration skills for working with technical teams and security operations personnel
Benefits

Hybrid work arrangement, with three onsite days per week in Harrisburg, Pennsylvania.
Company Overview

FPA develops practical health-centered solutions for complex data in scope and on budget. It was founded in 2021, and is headquartered in State College, Pennsylvania, US, with a workforce of 2-10 employees. Its website is https://www.forestpondassociates.com.