Hybrid Splunk & SOC Engineer — Detection & Analytics

Zachary Piper Solutions; Northern (KY); Hybrid; USD 100,000 - 120,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401k

Paid Time Off

Holidays

Sick Leave

Job summary

Piper Companies is seeking a highly capable Splunk Engineer / SOC Engineer to advance enterprise security monitoring and analytics. This full-time role works with SOC analysts, cloud teams, and engineering stakeholders in a hybrid model with 2 days on-site per week.

The position requires a Secret clearance to be eligible, and candidates should bring 5+ years of SIEM engineering or incident response experience, strong Splunk expertise, and a track record of optimizing detections and dashboards.

Qualifications

• 5+ years in SIEM engineering, security operations, or incident response environments.
• Strong proficiency with Splunk, including writing complex SPL queries and dashboards.
• Hands-on experience with data normalization, ingestion, and troubleshooting within Splunk Enterprise or Splunk ES.
• Experience onboarding security data sources into a centralized SIEM.
• Familiarity with cloud security services (AWS/Azure) integration.

Responsibilities

• Develop and optimize Splunk detections, dashboards, and correlation searches.
• Onboard, parse, normalize, and enrich security data into Splunk.
• Troubleshoot ingestion, forwarder connectivity, indexing, and search performance issues.
• Configure and maintain distributed Splunk environments.
• Leverage data models to improve detection performance and reporting.
• Collaborate with SOC and engineering teams to enhance threat detection and response workflows.
• Participate in incident response investigations.

Skills

Splunk

SPL queries

SIEM engineering

Dashboarding

Incident response

Data normalization

Tools

Splunk ES

Job description

Piper Companies is seeking a highly capable Splunk Engineer / SOC Engineer to advance enterprise security monitoring and analytics. This full-time role works with SOC analysts, cloud teams, and engineering stakeholders in a hybrid model with 2 days on-site per week.

The position requires a Secret clearance to be eligible, and candidates should bring 5+ years of SIEM engineering or incident response experience, strong Splunk expertise, and a track record of optimizing detections and dashboards.