Hybrid Splunk Engineer for SOC & Security Analytics

Zachary Piper Solutions; North Carolina; Hybrid; USD 100,000 - 120,000; Full time

Job summary

Piper Companies is seeking a skilled Splunk Engineer / SOC Engineer to support development and optimization of enterprise security monitoring and analytics. This full-time role is hybrid, with 2 days on-site per week, and requires a Secret clearance.

You will work closely with SOC analysts, cloud teams, and engineering stakeholders to enhance detection capabilities, visibility, and operational efficiency through Splunk engineering and automation.

Qualifications

• 5+ years in SIEM engineering, security operations, or incident response environments.
• Strong proficiency with Splunk, including writing complex SPL queries and building production-grade dashboards.
• Hands-on experience with data normalization, ingestion, and troubleshooting within Splunk Enterprise or Splunk ES.
• Experience integrating and onboarding security data sources into a centralized SIEM platform.
• Familiarity with integrating tools such as AWS Security Hub or similar cloud-native security services.
• Strong CIM knowledge objects, field extractions, and CIM normalization.
• Ability to perform effectively in high-pressure incident response situations and a willingness to participate in on-call rotations.

Responsibilities

• Developing, maintaining, and optimizing Splunk detections, dashboards, and correlation searches.
• Onboarding, parsing, normalizing, and enriching security data sources into Splunk.
• Troubleshooting ingestion pipelines, forwarder connectivity, indexing issues, and search performance challenges.
• Assisting with configuration, maintenance, and troubleshooting across distributed Splunk environments.
• Leveraging data models and accelerated searches to improve detection and reporting.
• Collaborating with SOC analysts and engineering teams to enhance threat detection and response workflows.
• Participating in incident response activities, including deep-dive investigations into security alerts.

Skills

Splunk

SPL queries

SIEM

Data normalization

Dashboards

Incident response

On-call readiness

Tools

Splunk Enterprise

Splunk ES

Splunk SOAR

AWS Security Hub

Job description

Piper Companies is seeking a skilled Splunk Engineer / SOC Engineer to support development and optimization of enterprise security monitoring and analytics. This full-time role is hybrid, with 2 days on-site per week, and requires a Secret clearance.

You will work closely with SOC analysts, cloud teams, and engineering stakeholders to enhance detection capabilities, visibility, and operational efficiency through Splunk engineering and automation.