Onsite Tier 3 SOC Analyst - Secret Clearance + Splunk Pro

Piper Companies; Durham (NC); On-site; USD 130,000 - 180,000; Full time

Benefits offered by this job

Onsite role

Comprehensive benefits

Job summary

Piper Companies is seeking a Tier 3 SOC Analyst in Durham, NC to lead advanced threat detection, incident response, and security investigations in a highly secure environment. The role requires an active Secret clearance and on-site work five days per week.

Responsibilities include guiding incident response, threat hunting, malware analysis, and mentoring junior SOC analysts while collaborating with engineering, compliance, and infrastructure teams to strengthen security posture.

Qualifications

• Active Secret clearance required.
• 5+ years in a SOC, Cyber Defense, or Incident Response role.
• Hands-on Splunk Enterprise experience for monitoring and threat detection.
• Experience investigating advanced threats and sophisticated cyber attacks.
• Familiarity with MITRE ATT&CK, threat intel, and security best practices.

Responsibilities

• Lead advanced incident response activities including threat hunting, malware analysis, and forensic investigations.
• Monitor, analyze, and respond to complex security events and alerts across enterprise environments.
• Develop custom Splunk dashboards, searches, correlations, and detection content.
• Conduct root cause analysis and provide remediation recommendations.
• Mentor junior SOC analysts and provide escalation support for high-priority incidents.
• Collaborate with engineering, infrastructure, and compliance teams to strengthen security posture.
• Develop and maintain incident response playbooks and security documentation.
• Stay current on emerging threats and industry best practices.

Skills

Splunk Enterprise

Incident response

Threat detection

Security operations

Mentoring

Education

Security+ or CISSP

Tools

SIEM

EDR

IDS/IPS

Job description

Piper Companies is seeking a Tier 3 SOC Analyst in Durham, NC to lead advanced threat detection, incident response, and security investigations in a highly secure environment. The role requires an active Secret clearance and on-site work five days per week.

Responsibilities include guiding incident response, threat hunting, malware analysis, and mentoring junior SOC analysts while collaborating with engineering, compliance, and infrastructure teams to strengthen security posture.