SIEM Engineer

Zachary Piper Solutions; Fulton (MD); Hybrid; USD 115,000 - 135,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k)

Job summary

Piper Companies is seeking a SIEM Engineer to join a growing cybersecurity operations team. You will design, build, and enhance Splunk dashboards, detection content, and analytics while partnering with SOC analysts and cloud teams to strengthen security posture.

The role requires advanced Splunk expertise, experience with AWS, and a proactive mindset. Hybrid schedule with onsite Fulton, MD two days per week, offering a comprehensive benefits package.

Qualifications

• 5+ years of experience in Security Operations, Incident Response, or related fields.
• Advanced Splunk expertise with complex dashboards, searches, analytics, and reporting.
• Hands-on AWS configuration, cloud security monitoring, and data integrations.
• Preferred Tier 2 SOC Analyst experience or equivalent security operations success.
• Active Secret Clearance is preferred but not required.

Responsibilities

• Design, build, and enhance Splunk dashboards, reports, alerts, and detection content.
• Develop and tune correlation searches, analytics, and use cases to identify threats.
• Integrate and validate security data sources from on-prem and cloud environments (AWS).
• Support security investigations with SOC teams to analyze alerts and improve detection coverage.
• Contribute to automation and platform optimization across security monitoring operations.

Skills

Security operations

Incident response

Threat detection

Analytic skills

Security analytics

Tools

Splunk

AWS

Job description

Piper Companies is seeking a SIEM Engineer to join a growing cybersecurity operations team supporting enterprise security monitoring, threat detection, and cloud security initiatives. The SIEM Engineer will play a key role in developing advanced Splunk dashboards, security analytics, and detection content while partnering with SOC analysts and cloud teams to strengthen the organization's security posture. This position is ideal for an experienced security professional or a highly motivated SOC analyst looking to take the next step into SIEM engineering.

Responsibilities of the SIEM Engineer:

• Design, build, and enhance Splunk dashboards, reports, alerts, and detection content to improve threat visibility and operational awareness.
• Develop and tune correlation searches, analytics, and use cases to identify emerging security threats and suspicious activity.
• Integrate, normalize, and validate security data sources from on-premise and cloud environments, including AWS platforms.
• Support security investigations by partnering with SOC teams to analyze alerts, identify root causes, and improve detection coverage.
• Contribute to automation initiatives, platform optimization efforts, and continuous improvements across security monitoring operations.

Qualifications of the SIEM Engineer:

• 5+ years of experience in SIEM Engineering, Security Operations, Cybersecurity, or Incident Response.
• Advanced Splunk expertise with a proven ability to create complex dashboards, searches, analytics, and reporting solutions.
• Hands-on experience with AWS configuration, cloud security monitoring, and data integrations.
• Previous Tier 2 SOC Analyst experience preferred, or demonstrated success in a security operations environment with strong technical aptitude.
• Active Secret Clearance is preferred but not required.

Compensation for the SIEM Engineer includes:

• Salary range: $115,000 - $135,000 annually
• Comprehensive benefits package including medical, dental, vision, 401(k), and PTO
• Hybrid schedule with onsite requirement two days per week (Tuesday and Thursday) in Fulton, MD

This job opens for applications on 08/26/2026. Applications for this job will be accepted for at least 30 days from the posting date.

Keywords: SIEM Engineer, Splunk, Splunk Dashboarding, Security Analytics, Detection Engineering, SOC Analyst, Tier 2 SOC, AWS, Cloud Security, Incident Response, Cybersecurity, Threat Detection, RTP, Raleigh, Fulton MD, Hybrid, Secret Clearance