Senior Splunk SIEM Engineer - ES & SOAR Expert

Piper Companies; Newington (VA); On-site; USD 165,000 - 190,000; Full time

Benefits offered by this job

Comprehensive Benefits

Flexible schedule

Growth opportunities

Job summary

Zachary Piper Solutions is seeking a Senior SIEM/Splunk Engineer to join a Federal Program in Newington, VA, onsite five days per week. The engineer will design, implement, tune, and maintain Splunk Enterprise and ES to support enterprise security monitoring, threat detection, and incident response.

The role requires 5–10+ years with Splunk, clustering/high availability, CIM mapping, and SOAR; you will build detections, dashboards, playbooks, and collaborate with SOC to strengthen operations.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, IT, or related field or equivalent experience.
• 5–10+ years hands-on experience with Splunk Enterprise and Splunk ES.
• Experience designing and supporting enterprise-scale Splunk with clustering and high availability.
• Strong Splunk architecture, SPL development, dashboards, CIM mapping, and search optimization.
• Experience with Splunk SOAR (Phantom) and security automation workflows.
• Knowledge of SIEM operations, MITRE ATT&CK, threat detection, and incident response.
• Experience integrating security tech including cloud platforms (AWS/Azure/GCP) and IAM.
• Proficiency in Linux/Unix, scripting, and automation (Git, Ansible).
• Splunk certifications and TS/SCI clearance preferred.

Responsibilities

• Architect, deploy, administer, and optimize Splunk Enterprise and ES.
• Design scalable, highly available Splunk infrastructure with clustering and data ingestion.
• Manage data onboarding, CIM compliance, and integrations across sources.
• Develop correlation searches, dashboards, models, and MITRE-aligned detections.
• Implement SOAR playbooks and automated response workflows.
• Perform health checks, capacity planning, and platform modernization efforts.
• Establish governance, RBAC, and security hardening for Splunk environments.
• Automate deployments and admin tasks with Ansible, Git, Python, Bash, and PowerShell.
• Collaborate with SOC to improve detection and incident response workflows.
• Maintain architecture docs and standard operating procedures.

Skills

Splunk Enterprise

Splunk ES

SPL development

Data models CIM

SOAR (Phantom)

Python

Bash

PowerShell

Git

Ansible

Linux/Unix

Scripting

MITRE ATT&CK

SecurityClearance

Education

Bachelor's degree in Cybersecurity/CS

Tools

AWS

Azure

GCP

IAM

RBAC

Job description

Zachary Piper Solutions is seeking a Senior SIEM/Splunk Engineer to join a Federal Program in Newington, VA, onsite five days per week. The engineer will design, implement, tune, and maintain Splunk Enterprise and ES to support enterprise security monitoring, threat detection, and incident response.

The role requires 5–10+ years with Splunk, clustering/high availability, CIM mapping, and SOAR; you will build detections, dashboards, playbooks, and collaborate with SOC to strengthen operations.