SIEM Engineer

Zachary Piper Solutions; Newington, Northern (VA, KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Zachary Piper Solutions is seeking a Senior Splunk Enterprise Security Engineer to support a cybersecurity operations program focused on threat detection and incident response at a client site. The role requires an active TS/SCI clearance and is on-site at a customer location in Virginia.

You will design, implement, and optimize Splunk ES environments, tune detections, and collaborate with the SOC and IT teams to enhance visibility and rapid alerting.

Qualifications

• 3+ years of experience in SIEM engineering, cybersecurity monitoring, or security analytics.
• Hands-on experience with Splunk Enterprise Security or other SIEM tools (e.g., QRadar), including log management and alert tuning.
• Strong understanding of security logs (Windows, Linux, firewall, IDS/IPS, and cloud environments) and networking protocols (TCP/IP, DNS, HTTP/S).
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience)

Responsibilities

• Design, implement, tune, and maintain Splunk Enterprise and Enterprise Security environments
• Develop and optimize SIEM use cases, correlation searches, and detection rules
• Analyze and correlate security events across multiple data sources to identify threats
• Collaborate with SOC, threat intelligence, and infrastructure teams to improve monitoring capabilities
• Support incident response efforts and continuously enhance alerting and visibility

Skills

SIEM engineering

Cybersecurity monitoring

Security analytics

Incident response

Threat detection

Education

Bachelor's degree in Cybersecurity or related field

Tools

Splunk Enterprise Security

QRadar

Job description

Zachary Piper Solutions is seeking a Senior Splunk Enterprise Security Engineer to support a company focused on enterprise-level cybersecurity operations, threat detection, and incident response. This position is on-site at a customer location. The Senior Splunk Enterprise Security Engineer will serve as a subject matter expert responsible for designing, implementing, and optimizing SIEM capabilities using Splunk Enterprise Security to enhance organizational visibility and detection effectiveness. Join a mission-driven team protecting critical systems and enabling proactive cyber defense operations.

Active TS/SCI clearance

Responsibilities for the Senior Splunk Enterprise Security Engineer include:

• Design, implement, tune, and maintain Splunk Enterprise and Enterprise Security environments
• Develop and optimize SIEM use cases, correlation searches, and detection rules
• Analyze and correlate security events across multiple data sources to identify threats
• Collaborate with SOC, threat intelligence, and infrastructure teams to improve monitoring capabilities
• Support incident response efforts and continuously enhance alerting and visibility

Required Qualifications for the Senior Splunk Enterprise Security Engineer include:

• 3+ years of experience in SIEM engineering, cybersecurity monitoring, or security analytics
• Hands-on experience with Splunk Enterprise Security or other SIEM tools (e.g., QRadar), including log management and alert tuning
• Strong understanding of security logs (Windows, Linux, firewall, IDS/IPS, and cloud environments) and networking protocols (TCP/IP, DNS, HTTP/S)
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience)

Compensation for the Senior Splunk Enterprise Security Engineer include:

Salary Range: Competitive, depending on experience

Full Benefits Package: PTO, Paid Holidays, Medical, Dental, Vision, 401K, Tuition Reimbursement, Sick leave as required by law

Keywords:

Splunk Enterprise Security, SIEM Engineer, Cybersecurity Monitoring, Security Analytics, Threat Detection, Incident Response, Log Management, Detection Engineering, TS/SCI, Splunk ES, QRadar, SOC, MITRE ATT&CK, NIST, Python, PowerShell, Bash, Cloud Security, AWS, Azure, GCP