Senior Splunk ES Engineer | Threat Detection & IR (TS/SCI)

Zachary Piper Solutions; Newington, Northern (VA, KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Zachary Piper Solutions is seeking a Senior Splunk Enterprise Security Engineer to support a cybersecurity operations program focused on threat detection and incident response at a client site. The role requires an active TS/SCI clearance and is on-site at a customer location in Virginia.

You will design, implement, and optimize Splunk ES environments, tune detections, and collaborate with the SOC and IT teams to enhance visibility and rapid alerting.

Qualifications

• 3+ years of experience in SIEM engineering, cybersecurity monitoring, or security analytics.
• Hands-on experience with Splunk Enterprise Security or other SIEM tools (e.g., QRadar), including log management and alert tuning.
• Strong understanding of security logs (Windows, Linux, firewall, IDS/IPS, and cloud environments) and networking protocols (TCP/IP, DNS, HTTP/S).
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience)

Responsibilities

• Design, implement, tune, and maintain Splunk Enterprise and Enterprise Security environments
• Develop and optimize SIEM use cases, correlation searches, and detection rules
• Analyze and correlate security events across multiple data sources to identify threats
• Collaborate with SOC, threat intelligence, and infrastructure teams to improve monitoring capabilities
• Support incident response efforts and continuously enhance alerting and visibility

Skills

SIEM engineering

Cybersecurity monitoring

Security analytics

Incident response

Threat detection

Education

Bachelor's degree in Cybersecurity or related field

Tools

Splunk Enterprise Security

QRadar

Job description

Zachary Piper Solutions is seeking a Senior Splunk Enterprise Security Engineer to support a cybersecurity operations program focused on threat detection and incident response at a client site. The role requires an active TS/SCI clearance and is on-site at a customer location in Virginia.

You will design, implement, and optimize Splunk ES environments, tune detections, and collaborate with the SOC and IT teams to enhance visibility and rapid alerting.