SIEM Engineer — Splunk Expert for Threat Detection (Hybrid)

Piper Companies; Raleigh (NC); Hybrid; USD 115,000 - 135,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401(k)

Paid time off

Job summary

Piper Companies is seeking an experienced SIEM Engineer to strengthen enterprise security monitoring for a leading technology organization. This hybrid role is based in either Durham, NC or Fulton, MD, with a strong focus on Splunk and incident response.

You will design and optimize SPL queries, onboard data sources, build dashboards and alerts, and help normalize CIM data to improve detection. Collaboration with security and engineering teams is required to advance the SIEM program.

Qualifications

• Minimum 5 years in cybersecurity, security operations, or SIEM engineering.
• Active Secret security clearance required.
• Hybrid work from Durham, NC or Fulton, MD with Splunk expertise.

Responsibilities

• Build, enhance, and maintain Splunk SPL queries for analytics and detection.
• Onboard diverse security tools and data sources into a centralized SIEM.
• Create dashboards, alerts, reports, and saved searches in Splunk.
• Configure CIM data normalization and field extractions.
• Assist in incident response investigations and recommendations.
• Collaborate with security and engineering teams to improve SIEM detection.

Skills

Splunk SPL

Incident response

Security operations

CIM normalization

EDR integration

Threat detection

Tools

Splunk

EDR

IDS/IPS

Firewalls

Job description

Piper Companies is seeking an experienced SIEM Engineer to strengthen enterprise security monitoring for a leading technology organization. This hybrid role is based in either Durham, NC or Fulton, MD, with a strong focus on Splunk and incident response.

You will design and optimize SPL queries, onboard data sources, build dashboards and alerts, and help normalize CIM data to improve detection. Collaboration with security and engineering teams is required to advance the SIEM program.