Hybrid Splunk SOC Engineer: Detection & Analytics

Piper Companies; North Carolina; Hybrid; USD 100,000 - 120,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401k

PTO

Holidays

Sick leave

Job summary

Piper Companies is seeking a highly skilled Splunk Engineer / SOC Engineer to support the development and optimization of enterprise security monitoring and analytics. This full-time role is hybrid with 2 days onsite weekly and requires a Secret clearance.

You will work with SOC analysts, cloud teams, and engineering stakeholders to enhance detection capabilities, visibility, and response workflows by engineering Splunk detections, dashboards, and ingestion pipelines across distributed

Qualifications

• 5+ years of experience in SIEM engineering, security operations, or incident response environments.
• Strong proficiency with Splunk, writing complex SPL queries and production-grade dashboards.
• Experience onboarding/security data sources into centralized SIEM; CIM normalization.
• Familiarity with cloud security services (AWS/Azure) and data normalization workflows.
• Comfortable in high-pressure incident response and on-call rotations.

Responsibilities

• Develop and optimize Splunk detections, dashboards, and correlation searches.
• Onboard, parse, normalize, and enrich diverse security data sources into Splunk.
• Troubleshoot ingestion pipelines, forwarder connectivity, and indexing issues.
• Maintain and troubleshoot distributed Splunk environments across teams.
• Collaborate with SOC analysts to improve threat detection and response workflows.
• Participate in incident response investigations and alert triage.

Skills

Splunk

SPL queries

Dashboard development

SIEM engineering

Incident response

Cloud security (AWS/Azure)

Tools

Splunk Enterprise

Splunk ES

AWS Security Hub

Job description

Piper Companies is seeking a highly skilled Splunk Engineer / SOC Engineer to support the development and optimization of enterprise security monitoring and analytics. This full-time role is hybrid with 2 days onsite weekly and requires a Secret clearance.

You will work with SOC analysts, cloud teams, and engineering stakeholders to enhance detection capabilities, visibility, and response workflows by engineering Splunk detections, dashboards, and ingestion pipelines across distributed