SIEM Engineer

Piper Companies; Raleigh (NC); Hybrid; USD 115,000 - 135,000; Full time

Job summary

Piper Companies is seeking an experienced SIEM Engineer to strengthen enterprise security monitoring for a leading technology organization. The role focuses on Splunk SPL development, centralized SIEM integration, and incident response support in a hybrid on-site setting based in Durham, NC or Fulton, MD.

You will build dashboards, optimize CIM normalization, manage knowledge objects, and collaborate with security and engineering teams to improve detection content and overall SIEM effectiveness.

Qualifications

• Minimum 5 years of experience in cybersecurity, security operations, or SIEM engineering.
• Active Secret security clearance is required.
• Hybrid work from Durham, NC, or Fulton, MD.
• Hands-on Splunk expertise with SPL query development and optimization.
• Strong knowledge of CIM normalization and data models.

Responsibilities

• Build, enhance, and maintain Splunk SPL queries for security analytics and threat detection.
• Integrate tools and data sources into a centralized SIEM environment.
• Create and optimize dashboards, alerts, reports, and saved searches.
• Configure field extractions and CIM-compliant data normalization.
• Assist in incident response investigations and provide actionable recommendations.
• Collaborate with security and engineering teams to improve detection content.
• Document SIEM configurations, processes, and best practices.

Skills

Splunk SPL

Incident response

Security operations

Data normalization

Security monitoring

Tools

Splunk

EDR

IDS/IPS

Firewalls

Cloud security

Job description

Piper Companies is seeking an experienced SIEM Engineer to help strengthen and advance enterprise security monitoring capabilities for a leading technology organization. This opportunity is well suited for a cybersecurity professional with extensive Splunk expertise, a strong background in incident response, and experience integrating diverse security technologies into a centralized SIEM ecosystem. This is a hybrid position based in either Durham, North Carolina, or Fulton, Maryland.

Responsibilities of the SIEM Engineer:

• Build, enhance, and maintain advanced Splunk SPL queries to support security analytics, monitoring, and threat detection initiatives
• Integrate and onboard security tools and data sources into a centralized SIEM environment
• Create, manage, and optimize Splunk knowledge objects, including dashboards, alerts, reports, and saved searches
• Configure field extractions, lookups, and CIM-compliant data normalization to improve data quality and consistency
• Assist in incident response activities through the investigation and analysis of security events, providing actionable recommendations
• Partner with security and engineering stakeholders to develop detection content and improve overall SIEM effectiveness
• Document SIEM configurations, processes, and best practices to support operational excellence

Qualifications of the SIEM Engineer:

• Minimum of 5 years of experience in cybersecurity, security operations, or SIEM engineering
• Active Secret security clearance is required
• Ability to work in a hybrid capacity from Durham, NC, or Fulton, MD
• Extensive hands-on experience with Splunk, including advanced SPL query development and optimization
• Strong understanding of Splunk knowledge objects, data models, and Common Information Model (CIM) normalization
• Experience integrating security technologies such as EDR, IDS/IPS, firewalls, and cloud security solutions into SIEM platforms
• Proven incident response and security operations experience

Compensation for the SIEM Engineer includes:

Salary range: $115,000 - $135,000 depending on experience

Comprehensive benefits package including medical, dental, vision, 401(k), and paid time off

This job opens for applications on 8/18/2026. Applications for this job will be accepted for at least 30 days from the posting date.

Keywords: SIEM Engineer, Splunk, Cybersecurity, Security Operations, SOC, Security Information and Event Management, SPL, Splunk Enterprise, Threat Detection, Threat Hunting, Incident Response, Security Monitoring, Log Analysis, Security Engineering, Security Analytics, SIEM Administration, Data Normalization, CIM, Common Information Model, Field Extractions, Security Alerts, Dashboard Development, Security Automation, Splunk Dashboards, Splunk Reports, EDR, IDS, IPS, Firewall Security, Cloud Security, Security Tools Integration, Detection Engineering, Security Events, Information Security, Network Security, Enterprise Security, Active Secret Clearance, Secret Clearance, Hybrid, Durham NC, North Carolina, Fulton MD, Maryland

#LI-RB1 #LI-HYBRID