SIEM Engineer - 174002

Zachary Piper Solutions; Newington, Northern (VA, KY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

PTO

Paid Holidays

Medical

Dental

Vision

401K

Tuition Reimbursement

Sick leave

Job summary

Zachary Piper Solutions is seeking a Senior Splunk Enterprise Security Engineer to design, implement, and optimize SIEM capabilities using Splunk ES for enterprise cybersecurity operations. This on-site role supports threat detection, incident response, and continuous improvement of monitoring visibility at a customer location.

The ideal candidate has 3+ years in SIEM engineering with hands-on Splunk ES experience, strong log analysis skills across Windows, Linux, network devices, and cloud

Qualifications

• 3+ years of experience in SIEM engineering, cybersecurity monitoring, or security analytics.
• Hands-on experience with Splunk Enterprise Security or other SIEM tools (e.g., QRadar), including log management and alert tuning.
• Strong understanding of security logs (Windows, Linux, firewall, IDS/IPS, and cloud environments) and networking protocols (TCP/IP, DNS, HTTP/S).

Responsibilities

• Design, implement, tune, and maintain Splunk Enterprise and Enterprise Security environments
• Develop and optimize SIEM use cases, correlation searches, and detection rules
• Analyze and correlate security events across multiple data sources to identify threats
• Collaborate with SOC, threat intelligence, and infrastructure teams to improve monitoring capabilities
• Support incident response efforts and continuously enhance alerting and visibility

Skills

SIEM engineering

Threat detection

Log management

Incident response coordination

Education

Bachelor's degree in Cybersecurity, IT, CS, or related field

Tools

Splunk Enterprise Security

QRadar

Job description

Zachary Piper Solutions is seeking a Senior Splunk Enterprise Security Engineer to support a company focused on enterprise-level cybersecurity operations, threat detection, and incident response. This position is on-site at a customer location. The Senior Splunk Enterprise Security Engineer will serve as a subject matter expert responsible for designing, implementing, and optimizing SIEM capabilities using Splunk Enterprise Security to enhance organizational visibility and detection effectiveness. Join a mission-driven team protecting critical systems and enabling proactive cyber defense operations.

Active TS/SCI clearance

Responsibilities for the Senior Splunk Enterprise Security Engineer include:

• Design, implement, tune, and maintain Splunk Enterprise and Enterprise Security environments
• Develop and optimize SIEM use cases, correlation searches, and detection rules
• Analyze and correlate security events across multiple data sources to identify threats
• Collaborate with SOC, threat intelligence, and infrastructure teams to improve monitoring capabilities
• Support incident response efforts and continuously enhance alerting and visibility

Required Qualifications for the Senior Splunk Enterprise Security Engineer include:

• 3+ years of experience in SIEM engineering, cybersecurity monitoring, or security analytics
• Hands-on experience with Splunk Enterprise Security or other SIEM tools (e.g., QRadar), including log management and alert tuning
• Strong understanding of security logs (Windows, Linux, firewall, IDS/IPS, and cloud environments) and networking protocols (TCP/IP, DNS, HTTP/S)
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience)

Compensation for the Senior Splunk Enterprise Security Engineer include:

Salary Range: Competitive, depending on experience

Full Benefits Package: PTO, Paid Holidays, Medical, Dental, Vision, 401K, Tuition Reimbursement, Sick leave as required by law

Keywords: Splunk Enterprise Security, SIEM Engineer, Cybersecurity Monitoring, Security Analytics, Threat Detection, Incident Response, Log Management, Detection Engineering, TS/SCI, Splunk ES, QRadar, SOC, MITRE ATT&CK, NIST, Python, PowerShell, Bash, Cloud Security, AWS, Azure, GCP