SIEM Engineer

Zachary Piper Solutions; Raleigh, Northern (NC, KY); Hybrid; USD 105,000 - 120,000; Full time

Benefits offered by this job

Health benefits

Dental

Vision

Paid time off

Paid holidays

Job summary

Zachary Piper Solutions is seeking a SIEM Engineer in the RTP area. The role is hybrid, onsite Tuesday and Thursday, focused on Splunk detections, dashboards, and automation to strengthen threat visibility.

The ideal candidate has 3+ years in SIEM/SOC/IR, strong SPL skills, and experience with AWS Security Hub and data onboarding in high‑pressure environments.

Qualifications

• 3+ years of SIEM engineering, SOC operations, or incident response experience.
• Advanced Splunk proficiency including SPL and production dashboards.
• Experience integrating AWS services and security tools into a centralized SIEM.

Responsibilities

• Engineer and enhance Splunk Enterprise Security detections, dashboards, and correlations.
• Build and support automation workflows and playbooks in Splunk SOAR.
• Integrate and normalize diverse security data sources into Splunk with CIM normalization.

Skills

Splunk

AWS

SIEM

SOC operations

Incident response

SPL queries

Dashboards

Job description

Zachary Piper Solutions is seeking a SIEM Engineer to join a leading client in the cybersecurity and defense industry in the RTP area. The SIEM Engineer role is a hybrid position requiring onsite presence on Tuesdays and Thursdays. The SIEM Engineer is best suited for a security professional with strong Splunk expertise, AWS exposure, and experience in SOC or incident response environments who thrives in a fast-paced, mission-driven setting.

Responsibilities of the SIEM Engineer include:

• Engineer and enhance Splunk Enterprise Security detections, dashboards, and correlation searches to strengthen threat visibility
• Build and support automation workflows and playbooks within Splunk SOAR to streamline response efforts
• Integrate and normalize diverse security data sources into Splunk while ensuring data quality and performance optimization
• Partner with SOC and engineering teams to refine detection capabilities and improve operational efficiency across the environment
• Lead and support incident investigations, coordinating response actions and contributing to continuous monitoring coverage

Requirements of the SIEM Engineer include:

• Active Secret Clearance
• 3+ years of experience in SIEM engineering, SOC operations, or incident response
• Advanced proficiency with Splunk, including writing complex SPL queries and building production-grade dashboards (similar to Ashley Brown-level experience)
• Experience integrating AWS services (such as AWS Security Hub) and other security tools into a centralized SIEM platform
• Strong understanding of data onboarding, CIM normalization, and Splunk knowledge objects, with the ability to operate in high-pressure environments
• Ability to work onsite twice weekly in RTP – Tuesday and Thursday

Compensation for the SIEM Engineer include:

• $105,000 – 120,000 annually
• Full Comprehensive Benefits: Health, Vision, Dental, PTO, Paid Holiday and Sick Leave if Required by Law.
• This job opens for applications on 8/21/2026. Applications for this job will be accepted for at least 30 days from the posting date.

Keywords: SIEM Engineer, Splunk, SOC, Incident Response, AWS, Security Operations, Hybrid, Fulton, MD