Senior Splunk & SOC Engineer – Hybrid (Secret Clearance)

Zachary Piper Solutions; North Carolina; Hybrid; USD 100,000 - 120,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401k

Paid time off

Job summary

Piper Companies is seeking a skilled Splunk Engineer / SOC Engineer to develop and optimize enterprise security monitoring and analytics. Hybrid work arrangement requires 2 days onsite, and the role supports SOC analysts, cloud teams, and engineering stakeholders.

The position emphasizes Splunk engineering, detection improvements, and automation to enhance security visibility and incident response capabilities. A Secret clearance is required to be eligible.

Qualifications

• Minimum 5+ years in SIEM engineering, security operations, or incident response.
• Strong Splunk proficiency including writing complex SPL and dashboards.
• Experience with data normalization, ingestion, and CIM normalization in Splunk.
• Experience onboarding security data sources into a centralized SIEM.
• Ability to handle on-call rotations in high-pressure incidents.

Responsibilities

• Develop, maintain, and optimize Splunk detections, dashboards, and correlations.
• Onboard and normalize security data sources into Splunk.
• Troubleshoot ingestion pipelines, forwarder connectivity, and indexing issues.
• Maintain distributed Splunk environments and configurations.
• Collaborate with SOC and engineering teams to improve detection and response.
• Participate in incident response investigations and alerts tuning.

Skills

Splunk SPL

SIEM engineering

Incident response

Dashboard development

Cloud integration

Tools

Splunk Enterprise

AWS/Azure security

CIM normalization

Job description

Piper Companies is seeking a skilled Splunk Engineer / SOC Engineer to develop and optimize enterprise security monitoring and analytics. Hybrid work arrangement requires 2 days onsite, and the role supports SOC analysts, cloud teams, and engineering stakeholders.

The position emphasizes Splunk engineering, detection improvements, and automation to enhance security visibility and incident response capabilities. A Secret clearance is required to be eligible.