Hybrid Splunk Security Engineer — SIEM & Detection

Zachary Piper Solutions; Northern (KY); Hybrid; USD 100,000 - 120,000; Full time

Job summary

Piper Companies is seeking a Splunk Engineer / SOC Engineer to support enterprise security monitoring and analytics. This hybrid role requires 2 days on-site per week and collaboration with SOC analysts, cloud teams, and engineering stakeholders in a fast-paced environment.

The ideal candidate has 5+ years in SIEM engineering, strong SPL skills, data onboarding and CIM normalization experience, and the ability to respond effectively to incidents while improving detection and visibility across

Qualifications

• 5+ years of experience in SIEM engineering, security operations, or incident response environments.
• Strong proficiency with Splunk, including writing complex SPL queries and building production-grade dashboards.
• Hands-on experience with data normalization, ingestion, and troubleshooting within Splunk Enterprise or Splunk ES.
• Experience integrating and onboarding security data sources into a centralized SIEM platform.
• Familiarity with integrating tools such as AWS Security Hub or similar cloud-native security services.

Responsibilities

• Developing, maintaining, and optimizing Splunk Security detections, dashboards, and correlation searches.
• Onboarding, parsing, normalizing, and enriching diverse security data sources into Splunk.
• Troubleshooting ingestion pipelines, forwarder connectivity, indexing issues, and search performance challenges.
• Assisting with configuration, maintenance, and troubleshooting across distributed Splunk environments.
• Leveraging data models and accelerated searches to improve detection performance and reporting efficiency.
• Collaborating with SOC analysts and engineering teams to enhance threat detection, visibility, and response workflows.
• Participating in incident response activities, including deep-dive investigations into security alerts.

Skills

Splunk SPL queries

Production-grade dashboards

SIEM engineering

Incident response

Tools

Splunk Enterprise

Splunk ES

AWS Security Hub

Job description

Piper Companies is seeking a Splunk Engineer / SOC Engineer to support enterprise security monitoring and analytics. This hybrid role requires 2 days on-site per week and collaboration with SOC analysts, cloud teams, and engineering stakeholders in a fast-paced environment.

The ideal candidate has 5+ years in SIEM engineering, strong SPL skills, data onboarding and CIM normalization experience, and the ability to respond effectively to incidents while improving detection and visibility across