Hybrid Splunk SOC Engineer — Detection & Analytics

Piper Companies; United States; Hybrid; USD 100,000 - 120,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401k

Job summary

Piper Companies is seeking a highly skilled Splunk Engineer / SOC Engineer to support enterprise security monitoring and analytics in a fast-paced environment. This full-time role collaborates with SOC analysts, cloud teams, and engineering stakeholders, with a hybrid schedule 2 days on-site.

The position requires a Secret clearance. Responsibilities include building and optimizing Splunk detections, dashboards, onboarding data sources, and incident response participation to enhance threat

Qualifications

• Minimum of 5+ years of experience in SIEM engineering, security operations, or incident response environments.
• Strong proficiency with Splunk, including writing complex SPL queries and building production-grade dashboards.
• Hands-on experience with data normalization, ingestion, and troubleshooting within Splunk Enterprise or Splunk ES.
• Experience integrating and onboarding security data sources into a centralized SIEM platform.
• Familiarity with integrating tools such as AWS Security Hub or similar cloud-native security services.
• Strong understanding of Splunk knowledge objects, field extractions, lookups, and CIM normalization.
• Ability to perform effectively in high-pressure incident response situations and a willingness to participate in on-call rotations.

Responsibilities

• Developing, maintaining, and optimizing Splunk Security detections, dashboards, and correlation searches.
• Onboarding, parsing, normalizing, and enriching diverse security data sources into Splunk.
• Troubleshooting ingestion pipelines, forwarder connectivity, indexing issues, and search performance challenges.
• Assisting with configuration, maintenance, and troubleshooting across distributed Splunk environments.
• Leveraging data models and accelerated searches to improve detection performance and reporting efficiency.
• Collaborating with SOC analysts and engineering teams to enhance threat detection, visibility, and response workflows.
• Participating in incident response activities, including deep-dive investigations into security alerts.

Skills

Splunk SPL

Data onboarding

SOC operations

AWS Security Hub

CIM normalization

Tools

Splunk Enterprise

Splunk ES

AWS Security Hub

Job description

Piper Companies is seeking a highly skilled Splunk Engineer / SOC Engineer to support enterprise security monitoring and analytics in a fast-paced environment. This full-time role collaborates with SOC analysts, cloud teams, and engineering stakeholders, with a hybrid schedule 2 days on-site.

The position requires a Secret clearance. Responsibilities include building and optimizing Splunk detections, dashboards, onboarding data sources, and incident response participation to enhance threat