Hybrid Splunk & SOC Engineer — Detection & Automation

Zachary Piper Solutions; Northern (KY); On-site; USD 100,000 - 120,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401k

Paid Time Off

Job summary

Piper Companies is seeking a Splunk Engineer / SOC Engineer to support enterprise security monitoring and analytics. Hybrid role with 2 days onsite weekly and a requirement for a Secret clearance.

Responsibilities include developing Splunk detections, dashboards, and data onboarding. You will work with SOC analysts, cloud teams, and engineering partners to enhance detection and response capabilities.

Qualifications

• Minimum 5+ years of experience in SIEM engineering, security operations, or incident response environments.
• Strong proficiency with Splunk, including writing complex SPL queries and production-grade dashboards.
• Hands-on experience with data normalization, ingestion, and troubleshooting within Splunk Enterprise or Splunk ES.
• Experience integrating security data sources into a centralized SIEM platform.
• Familiarity with integrating cloud-native security services (e.g., AWS Security Hub).
• Strong understanding of Splunk knowledge objects, CIM normalization, field extractions, and lookups.
• Ability to perform effectively in high-pressure incident response situations and participate in on-call rotations.

Responsibilities

• Developing, maintaining, and optimizing Splunk detections, dashboards, and correlation searches.
• Onboarding and normalizing diverse security data sources into Splunk.
• Troubleshooting ingestion pipelines, forwarder connectivity, indexing, and search performance.
• Configuring, maintaining, and troubleshooting distributed Splunk environments.
• Using data models and accelerated searches to improve detection and reporting.
• Collaborating with SOC analysts and engineering teams to enhance threat detection and response workflows.
• Participating in incident response investigations and alerts.

Skills

Splunk

SIEM

Incident Response

Dashboards

SPL

Cloud Integrations

Automation

Job description

Piper Companies is seeking a Splunk Engineer / SOC Engineer to support enterprise security monitoring and analytics. Hybrid role with 2 days onsite weekly and a requirement for a Secret clearance.

Responsibilities include developing Splunk detections, dashboards, and data onboarding. You will work with SOC analysts, cloud teams, and engineering partners to enhance detection and response capabilities.